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1. An information sending system for sending predetermined contents 
(Uitri from an information sending apparatus to an information receiving 
apparatus, wherein said information sending apparatus comprises: 

means for holding identification information to identify said 
information sending apparatus encrypted by a distribution key unique 
to said information receiving apparatus; 

means for adding said identification information to said contents 
data in order to make a comparison with said identification Information 
encrypted by said distribution icsy; and 

roeans for sending said identification In.fcrniHtian encrypted by 
said distribution key together with said contents data with said 
identification information added; 2nd 

said information receiving apparatus comprises: 

means for holding said distribution key; 

means for receiving said contents data with said identification 
intonation added and said identif ication information encrypted by said 
distribution key; 

jaeans for decrypting by said distribution key said identification 
information encrypted by the distribution key; and 

means for comparing said identification information added to said 
contents data with said decrypted identification information. 
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2. The information sending system according to claim i, wherein said 
information sending apparatus comprises: 

means for generating handling policies, that is, generating 
contents handling policies prescribing concisions for using said 
contents data and storing said identification information, and 

said means for adding identification information adds said 
contents handling policies to said contents data. 

3. The information sending system according to claim 1, wherein said 
means for adding identif ication information or" said information sending 
apparatus directly adds said identification information to said 
concents data. 

4. The information sending system according to claim 1/ wherein said 
information sending apparatus comprises: 

means for encrypting said contents data by a predetermined content 

key; 

me Ann for encrypting said contents !<ey by a predetermined 
individual key; 

means for adding signature data for checking illegal data and 
tampering to said contents key encrypted by said individual key and 
said identification information encrypted by said distribution key; 
a nd 

said information receiving apparatus comprises means for veri fyingi 
said signature data. 
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5. The information sending system according to claim 3, wherein sale 
means for adding a signature of said information sanding apparatus adds 
said signature data to sold contents data encrypted by said content, 
key, and it T album contents data storing a plurality of said content t- 
data encrypted by said content key to which the signature data is added 
is generated, it also adds said signature data to the album content;:; 
data; and 

said means for verifying a signature of said information receiving 
apparatus verifies said signature data added to said album contents 
data, and if it determines that said album contents data is correct- 
data as a result of the verification, it omits verities Li on of said 
signature data added to each of said contents data encrypted by save 
content key scored in said album contents data. 

(i. The information sending system according to claim 5, wherein said 
means for adding a signature of said information sending apparatus adds 
said signature data to said contents key encrypted by said individual 
kev and said identification information encrypted by said distribution 
key respectively, and corresponding to said album contents data, if 
album key data is generated by storing a plurality of said contents 
ki*ys encrypted by said individual key and said identification 
information encrypted by said distribution key to which said signature 
data is added, it also adds said signature data to the album key data; 

and 
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said means lor verifying a signature of said information receiving 
apparatus verifies said signature data added to said album hey data, 
and if it determines that said album key data is correct data as a result 
of the verification, it omits verification of said signature data added 
to said contents key encrypted by said individual key and said 
identification information encrypted by said distribution key scored 
in the album key data respectively. 

7. The information sending system according to claim 6, wherein said 
information sending apparatus comprises: 

means for generating handling policies, that is, generating 
contents handling policies prescribing conditions for using said 
contents data and storing said identification information, and 

said means tor adding a signature of said inforraatiox: sending 
apparatus adds said signature data to said contents data handling 
policies, and corresponding to said album contents data, if album 
handling policies are generated by storing a plurality of said contents 
handling policies to which sa;id signature data i s added, it also adds 
said signature data to the album handling policies; and 

said means for verifying a signature of said information receiving 
apparatus verifies said signature data added to said album handling 
policies, and if it determines that said album handling policies ar<s 
correct data as a result of the verification, it: omits verification 
of said signature data added to said contents handling policies stored 



in the album handling policies. 
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8. The information sending system according to claim 7, wherein said 
information sending apparatus comprises the means for: 

creating contents price information shewing a price for said 
contents data, and 

said means for adding a signature of said information sending 
apparatus adds said signature data to said concents price information, 
and corresponding to said album contents data, if album price 
information data storing a plurality of said contents price information 
to which said signature data is added Is generated, it also adds said 
signature data to the album price .information; and 

said neanii for verifying a signature of said information receiving 
atJparatus verifies said signature data added no said album price 
information, and if it determines that said aibura price information 
is correct data as a result of the verification, it omits verification 
of said signature data added to said contents price information stored 
in the album price information. 

9. The information sending system according to claim 8 wherein: 

said means for generating hand! trig policies of said information 
sending apparatus generates said contents handling policies storing 
signature verification in format ion representing whether or not said 
signature data added to said contents data encrypted by said content 
key is verified; and 



Application/Control Number: 09/831,071 
Art Unit: *** 



said means lor verifying a signature of said information receiving 
apparatus verifies said signature data added to said contents data 
encrypted by said content key only when instructed to verify said 
signature data added to said contents data encrypted by said content 
key based on said signature verification information stored in said 
contents handling policies. 

1.0. The information sending ays ten according Co claim 9 wherein: 

said means for generating handling policies of said information 
sending apparatus gene rater, said contents handling policies storing 
said signature verification information representing whether or not 
said signature data added to said Album contents data is verified; and 
sold means for verifying a signature of said information receiving 
apparatus verifies :said signature data added to said album contents 
data only when instructed to verify said signature data added Co the 
album contents da to based on said signature verification information 
stored in said contents handling policies. 

11 . The information sending system according to claim 0 wherein: 

said means for creating price information of said information 
sending apparatus creates said content-? price information storing 
signature verification information representing whether or not said 
signature data added to said contents data encrypted by said content 
Key is verified; and 
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said means for verifying a signature of said information receiving 
apparatus verifies said signature data added to said contents data 
encrypted by said content key only when instructed to verify said 
signature data added to said contents data encrypted by the content 
key based on said signature verification information stored in saio 
contents price information. 

12. The information sending system according to claim 11 wherein: 
said means for creating price information of said information 

sending apparatus creates said contents price information storing said 
Signature verification information representing whether or not said 
signature data added to said album contents data is verified; and 

said mean3 for verifying a signature of said information receiving 
apparatus verifies .said signature data added to said album contents 
data only when instructed to verify said signature data added to the 
album content's data based on said signature verification In fortiiati.cn 
stored in said contents price information. 

13. Tho information sending system according to claim 12 wherein: 
said means for generating handling policies of said information 

sending apparatus generates said contents handling policies 
prescribing that another specific contents data of said may be acquired 
only when said specific contents data is acquired. 
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14. An information sending apparatus for sending predetermined 
contents data tc an information receiving apparatus, comprising: 

mesmrt for holding identification information to identify said 
information sending apparatus encrypted by a distribution key unique 
to said information receiving apparatus; 

means for adding said identification in formation to said contents 
data in order to stake a comparison with said identification information 
encrypted by said distribution key; and 

raeans for sending said identification information encrypted by 
said distribution key together with said contents data with said 
identification information added. 

15. The information sending apparatus according to claim 14 
coppriai ng: 

means fcr generating handling policies, that is, generating 
contents handling policies prescribing conditions for using said 
contents data and storing said identification information, and wherein: 

said means for adding identification information adds said 
contents handling policies to said contents data. 

16. The information sending apparatus according to claim 14 wherein: 
said means for adding identification information adds said 

Identification information to said contents data. 
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17, The information sending apparatus according to claim 14, 
comprising : 

means for encrypting said contents data by a predetermined content 

key; 

means for encrypting said concents key by a predetermined 
I n d i vidua I key; 

means for adding signature daca for checking illegal data and 
tampering to said contents key encrypted by said individual key and. 
said identification in format ion encrypted by said distribution key in 
said information receiving apparatus. 

18. The information sending apparatus according to claim 17, wherein 
said means for adding a signature adds said signature data to said 
contents data encrypted by said content key, and if album contents data 
.storing a plurality of said contents data encrypted by said contenz 
key to which said signature data is added is- generated, it also adds 
said signature .data to the album contents data. 

.19, The information sending apparatus according to claim 18, wherein 
said means for adding a signature adds said signature data to said 
concents key encrypted by said individual key and said identification 
information encrypted by said distribution key respectively/ and 
corresponding to said album contents data, if album key data is generated 
by storing a plurality of the contents keys encrypted by said individual. 

key and 3a id idenf.i Cleat ion information encrypted by said distribution 
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key co which said signature data is added, it also adds said signature 
data to the album key data, 

20, The information sending apparatus according to ciaim IS, 
comprising the means tot generating handling policies, that is, 
generating contents handling policies prescribing condit ions for using 
said contents data and storing ssid identification information, and 
wherein: 

said neans for adding a signature adds said signature data to said 
contents data handling policies, and corresponding to said album 
contents data, if album handling policies are generated by storing a 
plurality of said contents handling policies to which said signature 
data is added, it also adds said signature data to the alhu:u handling 
policies . 

21. The information sending apparatus according co claim 20, 
comprising the means .for creating contents price information showing 
a price for said contents data, and wherein: 

said means tor adding a signature adds sale signature data to said 
contents price information, snd corresponding to said album contents 
data, if album price inforaiation data storing a plurality of said 
contents price information to which said signature data is added is 
generated, it also adds said signature data to the aXbu>n price 
information. 
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22. The Information sending apparatus according to claim 21. wherein: 
said means for generating handling policies generates said 

contents handling policies storing signature verification information 
representing whether or not said signature data added to said contents 
data encrypted by said content key is verities 

23. The information sending apparatus according to claim 22 wherein: 
said means for generating handling policies generates said 

contents handling policies storing said signature verification 
information representing whether or not said signature data added to 
said album contents data is verified. 

Z'U The information sending apparatus according to claim 21 wherein: 
said means for creating price information creates said contents 
price information storing signature verification Information 
representing whether or not said signature data added to said contents 
data encrypted by said content key is verified. 

2$> The information sending apparatus according to claim 2 4 wherein: 
said means for creating price information creates said contents 
price information storing said signature verification information 
representing whether or not said signature data added to said album 
rxm to nr. s da fc a is ve v i t .1 ed . 



26. The information sending apparatus according to claim 25 wherein: 
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said means for generating handling policies generates -said 
contents handling policies prescribing that another specific contents 
data of said may be acquired only when said specific contents data is 
acquired. 

27. An informal: ion receiving apparatus for receiving predetermined 
contents data sent from an information sending apparatus, comprising: 

means for holding a predetermined distribution key unique to said 
information receiving apparatus; 

means for receiving said contents data with identification 
information added to identify said information sending apparatus and 
said identification i nformation encrypted by said dis trabuticn key sent 
from said information sending apparatus; 

moans for decrypting by said distribution key said identification 
Information encrypted by the distribution key; and 

means for comparing said identification information added to said 
contents data with said decrypted identification information. 

28. The information receiving apparatus according to claim 21, 
comprising : 

means for performing a purchasing procedure tor said contents data; 
and wherein.: 

said means for receiving receives said contents data sent from 
said information sending apparatus and contents handling policies 



Application/Control Number: 09/831,071 
Art Unit: *** 



prescribing conditions for using said contents data added to Che 
contents data and storing said identification information; 

said means for comparing compares said identification information 
stored in said contents handling policies with said identification 
information that is decrypted; and 

when said identification information compared in said means fox 
comparing mutually marches, said means for performing o purchasing 
procedure performs said purchasing procedure of said contents data by 
using said contents handling policies. 

29. The info mat ion receivi ng Apparatus according zo claim 27, 
wherein: 

said means for receiving receives said contents data sent from 
said information sending apparatus and said identification information 
directly added to the contents data. 

30. The information receiving apparatus according to claim 27, 
comprising the means for verifying a signature, that is, verifying 
signature data added to said content key encrypted by said individual 
key and said identification information encrypted said distribution 
key sent from said information sending apparatus together with said 
contents data encrypted by a predetermined contents key and said 
contents key encrypted by a predetermined individual key, and detecting 
whether or not said content Key encrypted by said individual key and 
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said identification information encrypted said distribution key are 
illegal data and tampered data. 

31 . The information receiving apparatus according toclaim30, wherein 
said means for verifying a signature verifies said signature data added 
to said album contents data, of said signature data added to said 
contents data encrypted by said content key and said signature data 
added tc album contents data storing a plurality of said contents data 
encrypted by said content key, sent from said information sending 
apparatus, and it it determines that said album contents data is correct 
data as a result of the verification, it omits verification of said 
Signature data added to each of said contents data encrypted by said 
content key stored in the album contents data. 

32. The i n f o r ma t ion race i v ing appo ra tu s accor d iny to cla i m 31 , whe re in 
said means for verifying 3 signature verifies said signature data added 
to the album key data, of said signature data added said contents key 
encrypted by said individual key and said identification information 
encrypted by said distribution key respectively and said signature data 
added to album key data storing a plurality of said contents Keys 
encrypted by said individual key and said identification information 
encrypted by said distribution key to which said signature data is added 
corresponding to said album contents data, sent; from said information 
sending apparatus, and if it determines that said album key data io 

correct data as a result of the verification, it omits verification: 
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of said signature data added to said concents key encrypted by said 
individual key and said identification information encrypted by said 
distribution key stored art the album key data respectively. 

33. The information receiving apparatus according to claim 3Z, wherein 
said means for verifying a signature verifies said signature data added 
to album handling policies, of said signature data added to contents 
handling policies prescribing conditions for using said contents data 
and storing said identification information and said signature data 
added to said album handling policies storing a plurality of said 
contents handling policies to which said signature data is added 
corresponding to said albu-i contents data, sent from said information 
sending apparatus, end if it determines that said album handling 
policies are correct data as a result of the verification, it omits 
verification of said signature data added to said contents handling 
policies stored in the album handling policies. 

34 . The information receiving apparatus according to claim 33, wherein 
said means for verifying a signature veti f ief? said signature data added 
to the album price information, of said signature, data added to contents 
price information showing a price for said contents data and said 
signature data added to the album pricfi information data storing a 
plurality of said contents price information to which said signature 
data is added corresponding to said album contents data, sent £ron> said 



information sending apparatus, arid if it determines that said album 
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price information is correct data as a resale of the verification, it 
omits verification of said signature data added to said contents price 
information stored in the album price information. 

35. The information receiving apparatus according to claim 34, wherein 
said means for verifying a signature verifier, said signature data added 
to said contents data encrypted by said content key, only when instructed 
to verify said signature data based on said signature verification 
information stored in the contents handling policies, of said contents 
data encrypted by said content key, said signature data added to said 
contents data encrypted by said content key and said contents handling 
policies storing signature verification information representing 
whether or not the signature data is verified, sent from said information 
sending apparatus. 

36. The information receiving apparatus according to claim 35, wherein 
said Deans for verifying a signature verifies said signature data added 
to said album contents data, only when instructed to verify said 
signature data based on said signature verification information stored 
in the contents handling policies, of said album contents data, said 
signature data added to said album contents data and said contents 
handling policies storing said signature verification in forma lion 
representing whether or not the signature Hara is verified, sent from 
said information sending apparatus. 
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21. The information receiving apparatus according t;o claim 34, wherein 
said means for verifying a signature verities .said signature data added 
to said contents data encrypted by said content key, only when instructed 
to verify said signature data based on said signature verification 
information stored in the contents price information, of said contents 
data encrypted by said content key, said signature data added to said 
contents data encrypted by the content key, and said contents price 
information storing signature verification information representing 
whether or not the signature data is vera tied, sent from said information 
sending apparatus. 

38. The information receiving apparatus according to claim 37, wherein 
said means for verifying a signature verifies said signature data added 
to said album contents data, only when instructed to verify said 
Signature data based on said signature verification information stored 
in the contents price information, of said album contents data, said 
signature data added to the album contents data and said contents price 
information storing said signature verification information 
representing whether or not the signature data is verified, sent from 
said information sending apparatus. 

39. The information receiving apparatus according to claim 39, wherein 
said means for receiving receives said contents handling policies 
prescribing that receipt of another specific contents data of said is 

allowed only when said specific contents data is acquired. 
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40. An information sending method for sending predetermined contents 
data from an information sending apparatus to an information receiving 
apparatus, comprising: 

an identification information adding step of, by said information 
sending apparatus, adding to said contents? data identification 
information to identify the information sending apparatus; and 

a sending step of, by said information sending apparatus, sending 
contents data with said identification information added and 
identification information to identify said information sending 
apparatus encrypted by a distribution key unique to said information 
receiving apparatus ; 

a receiving step of, by said in format ten receiving apparatus, 
receiving said contents data with said identif ication information added 
and said identification information encrypted by said distribution key; 

a decrypting step of, in said information receiving apparatus, 
decrypting by said distribution key said identification information 
encrypted by said distribution key; and 

a comparing step of, by said information receiving apparatus, 
comparing said .identification information added to said contents data 
with said decrypted identification information. 

41. The information sending method according to claim 40, comprising: 
a handling policies generating step of, by said information sending 
apparatus, generating contents handling policies prescribing 
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conditions for using said contents data and storing said identification • 
information, and 

a handling policies adding step of adding said contents handling 
policies to said contents data. , 

42. The information sending method according to claim 40, wherein said 
identification information adding step directly adds said 
identification information to said contents data- 

f 

43. The information sending method according to claim 40, comprising; | 
a contents data encrypting step of, by said information sending; 

apparatus, encrypting said contents data by a predetermined content ! 

key; \ 
a contents key encrypting step of, by said information sending; 

apparatus, encrypting said contents key by a predetermined individual: 

i 

key; 

a signature adding step of, by said information sending apparatus, ■: 
adding signature data for checXing illegal data and tampering to said* 
contents key encrypted by said individual key and said identification, 
information encrypted by said distribution key; and j 

a signature verifying step of, by said information receiving : 
apparatus, verifying said signature data added to said contents keyj 
encrypted by individual key and identification information encrypted; 
by said distribuliun key. ■ 
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44 . The information sending method according to claim 43, wherein said 
signature adding step adds said signature data to said contents data 
encrypted by said content key, and if album contents data storing a 
plurality of said contents data encrypted by said content Hey to which 
the signature data is added is generated, it also odds said signature 
data to the album contents data; and 

said signature verifying step verifies said signature data added 
to said album contents data, and if it determines that said album 
contents data ia correct data as a result of the verification, it omits 
verification of said signature data added tc each of said contents data 
encrypted by said content key stored in said album contents data. 

45. The! n f 0 rma tion sending method according to claim '54, wh &r c i r. s a i d 
Signature adding step adds said signature data to said contents ):ey 
encrypted by said individual key and sold identification information 
encrypted by said distribution key respectively, and corresponding to 
said album contents data, if album key data is generated by storing 
a pl.mra.V.i.ty of contents key encrypted by said individual key and said 
identification informal: ion encrypted by said distribution key to which, 
said signature data is added, St also adds said signature data to the 
album key data; and 

said signature verifying step verifies said signature data added 
to said album key data, and if it determines that said album key data 
is correct data as a result of the verification, it emits verification 

of said signature data added to said contents key encrypted by said 
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individual key and .said identifi cation information encrypted by said 
distribution key stored in said album key data respectively. 

46. The information sending method according to claim 45, comprising 
a handling policies generating step of generating contents handling 
policies prescribing conditions for using said contents data and 
storing said identification information, and wherein: 

said signature adding step adds said signature data to said 
contents data handling policies, and corresponding to said album 
contents data, it album handling policies arc generated by storing a 
plurality of said contents handling policies to wh.i ch said signature 
data is added, it also adds said signature data to the album handling 
policies; and 

said signature verifying step verifiers said signature data added 
to said album handling policies, and if it determines that said album 
handling policies are correct data as a result of the verification, 
it omits verification of said signature data added to said contents 
handling policies stored in the album handling policies. 

41. The information sending method according to claim 4 6, comprising 
the step of creating contents price information showing a price Tor- 
said contents data, and wherein: 

said signature adding step adds said signature data to said 
contents price information, and corresponding to said album contents 

data, if album price information data storing a plurality of znid 
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contents price information to which said signature data is added is 
generated, it also adds said signature data to Che album price 
information; and 

said signature verifying step verifies said signature data added 
to said album price information, and if it dete.rmin.es that said alburn 
price information is correct data as a result of the verification, it 
omits verification of said signature data added to said contents price 
information stored in the album price, information. 

48. The information sending method according to claim 41 wherein: 
s<jid handling policies generating step generates said contents 

handling policies storing signature verification information 
representing whether or not said signs tine data added to said contents 
data encrypted by said content key is verified; and 

said signature verifying step verifies said signature data added, 
to said contents data encrypted by said content key only when instructed, 
to verify said signature data added to said contents data encrypted 
by the content key based or. said signature verification information, 
stored in said contents handling policies. 

49. The information sending r^ethad according to claim 4 6 wherein: 
said handling policies generating step generates said contents 

handling policies storing said signature verification information 
representing whether or not said signature data added to said album 



contents data is verified; and 
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said signature verifying step verifies said signature data added 
to said album consents data only when instructed CO veri f y said signature 
data added to the album contents data based on said signature 
verification information stored in said contents handling policies, 

50. The information sending method according to claim 47 wherein: 

said price information creating step creates said contents price 
information storing signature verification information representing 
yhcther or not said signature data added to said contents data encrypted 
l>y said content key is verified; and 

said signature verifying step verifies said signature data added 
to said contents data encrypted by said content key only when Instructed 
to verify said signature data added to said contents data encrypted 
by said content key based on sold signature verification information 
stored In said contents price information. 

bi. The information sending method according to claim 50 wherein: 

said price information creating step creates said contents price 
information storing said signature verification information 
representing whether or not said signature data added to said album 
contents data is verified; and 

said signature verifying step verifies said signature data added 
CO said album contents data only when instructed to verify said signature 
data added to said album contents data based on said signature 
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said signature verifying step verifies said signature data added 
to said album con tents date only when instructed CO verify said signature 
data Prided to the album contents data based on said signature 
verification information stored in said contents handling policies. 

50. The information sending method according to claim 47 wherein: 
said price information creating step creates said contents price 

information storing signature verification information representing 
yhether or not: said signature data added to said contents data encrypted 
lay said content key is verified; and 

said signature verifying step verifies said signature data added 
to said contents data encrypted by said content key only when instructed 
to verify said signature data added to said contents data encrypted 
by said content key based on said signature verification- information 
stored in said contents price in format: ion. 

51. The information sending method according to claim 50 wherein: 
said price information creating step creates said contents price 

information storing said signature verification information 
representing whether or not said signature data added to said album 
contents data is verified; and 

said signature verifying step verifies said signature data added 
to said album contents data only when instructed to verify said signature 
data added to said albura contents data based on said signature 



verification information stored in said con Cents price information 
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52. The information sending method according Lo claim 51 wherein: 
said handling policies generating step generates said contents 

handling policies prescr ibing that another specific contents data of 
said may be acquired only when said specific contents data is acqui red. 

53. An information sending method for sending predetermined contents 
data to an information receiving apparatus, comprising: 

an identification in format ion adding step of adding said 
identification indorsation to said contents data in order to make a 
comparison with identification information for identifying said 
information sending apparatus encrypted by a predetermined 
distribution key unique to said information receiving apparatus and 
held in advance; and 

a sending step of sending said identification information 
encrypted by said distribution key to said information receiving 
apparatus.* together with said contents data with said identification 
information added. 

54. The information sending method according to claim S3 comprising 
the steps of: 

a handling policies generating step of generating contents 
handling policies prescribing conditions for using said contents data 
and storing said identification information, and wherein: 
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a handling policies adding stop of adding said contents handling 
policies to said contents data. 

56. The information sending method according to claim 53 wherein: 

said identification information adding step directly adds said 
identification information to said contents data. 

56. The information sending method according to claim S3, comprising: 
a contents data encrypting step of encrypting said contents data 

by a predetermined content key; 

a contents key encrypting step of encrypting said contents key 
by a predetermined individual key; 

a signature adding step of adding signature data for checking 
illegal data and tampering to said contents key encrypted by said 
individual key and said identification information encrypted by said 
distribution key in said information receiving app&rfltns. 

57. The mformatian sending method according to claim 56, wherein saic 
signature adding step adds said signature data to said contents data 
encrypted by said content key, and if album contents data s to ting a 
plurality of said contents data encrypted by said content key to which 
said signature data is added is generated, it also adds said signature 
data to the a i bum con t e n t $ da t a . 
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SB. The information sending method according to claim 57/ wherein said 
signature adding step adds said .signature data to said contents key 
encrypted by said individual key and said identification information 
encrypted by said distribution key respectively, and corresponding to 
said album contents data, if album key data is generated by storing 
a plurality of the contents keys encrypted by said individual key and 
said identification information encrypted by said distribution key tc 
which said signature data is added, it also adds said signature data 
to the album key data. 

59, The information sending method according ro claim 58, comprising 
a handling policies generating step of generating contents handling 
policies prescribing conditions for using said contents data and 
storing said identification information, and wherein: 

said signature adding step adds said signature data to said 
contents data handling policies, and corresponding to said album 
contents data, if album handling policies are generated by storing a 
plurality of said contents handling policies to which said signature 
data is added, it also adds said signature data to the album handling 
policies . 

60. The information sending method according to claim 59, comprising 
a price Information creating step of creating contents price 
information showing a price for saio contents data, and wherein: 
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said signature adding step adds said signature data to said 
contents price information, and corresponding to said album contend 
data, if album price information data storing a plurality of said" 
contents price information to which said signature data is added is 
generated, it also adds said signature data to the album price 
information . 

6.1. The information sending nethod according to claim 60 wherein: 

said handling policies generating step generates said contents 
handling policies storing signature verification information 
representing whether or not said signature data added to said concents 
data encrypted by said content key is verified. 

62. The information sending method according to claim 61 wherein: 
said handling policies generating step generates said contents 

handling policies storing said signature verification information 
representing whether or not said signature data added to said album 
contents data is verified. 

63. The information sending method according to claim 60 wherein: 
said price information creating step creates said contents pries 

Information storing signature verification information representing 
wh e t her o r no t s a i d s 1 gn a t u r e d a t a a dde d r. o s a i d con tented o t a encr yp t e£ 
by said content key in v«rifi*i:1. 



Application/Control Number: 09/831,071 
Art Unit: *** 



Page 30 



64. The information sending method according to claim 63 wherein: 
said price information creating step creates said contents price 

information storing said signature verification information 
representing whether or not said signature data added to said Album 
contents data is verified. 

65. The information sending method according to claim 64 wherein: 
said handling policies generating Step generates said contents 

handling policies prescribing that another specific contents data of 
said may be acquired only when said specific contents data is acquired. 

66. An information receiving method for receiving predetermined 
contents data sent from an information sending apparatus, comprising: 

a receiving step of receiving said contents data with 
identification information added to identify said information sending, 
apparatus and said identifi cation information encrypted by a 
predetermined distribution key unique to said information receiving 
apparatus sent from said information sending apparatus; 

a decrypting atep of decrypting by said distribution key said 
identification information encrypted by the distribution key; and 

a comparing step of comparing said identification information 
added to said contents data with said decrypted identification 
information. 
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67. The information receiving method according to ciairc 66, comprising 
a purchasing step of performi ng a purchasing procedure for said contents 
data, wherein: 

said receiving step receives said contents data senr from said 
information sending apparatus and contents handling policies 
prescribing conditions for using said contents data added to the 
contents data and storing said identification information; 

said comparing step compares said identification in forma lion 
stored in said contents handling policies with said identification 
information that is decrypted; and 

when said identification information compared in said comparing 
step mutually matches, said purchasing step performs said purchasing 
procedure of said contents data by using said contests handling 
policies. 

66. The information receiving method according to claim 66, wherein: 

said comparing atep compares said identification information 
directly added to said contents data with said decrypted identification 
information. 

69. The information receiving method according to claim 66, comprising 
a signature verifying step of verifying signature data added to said 
concent key encrypted by said individual key and said identification 
information encrypted said distribution Key sent from said information 



sending apparatus together with said contents data encrypted by i;r 
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predetermined content key and said contents key encrypted by the j 
predetermined individual key. and detecting whether or not said conteni: | 
key encrypted by said individual key and said identification j 
information encrypted said distribution key are illegal data and j 
tampered dat:a. i 



70. The information receiving method according to claim 69, wherein 
said signature verifying step verifies said signature data added to 
said album contents data, of said signature data added to said contents 
data encrypted by said content key and said signature data added to 
album contents data storing a plurality of said contents data encrypted 
by said content key, sent from said information sending apparatus, and j 
if it determines that said album contents data is correct data as a; 
result of the verification, it emits verification of >>aid signature: 
data added to each of said contents data encrypted by said content key| 
stored in the album contents- data. I 



71. The information receiving method according to claim 70, wherein 
said signature verifying step verifies said signature data added to 
the album key data, of said signature data added to said contents key 
encrypted by said individual key and said identification information 
encrypted by said distribution key respectively and said signature data 
added to album key data storing a plurality of said contents keys \ 
encrypted by said individual key and said identification information; 

encrypted by said distribution key corresponding Lu held album contents 
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data, sent from said information sending apparatus, ana if it determines 
that said album key data is correct data as a result of the verif ication, 
it omits verification of said signature data added to said contents 
key encrypted by said individual key and said identification 
information encrypted by said distribution key stored in the album key 
data respectively. 

72. The information receiving method according to claim 71, wherein 
said signature verifying step verifies said signature data added to 
the album handling policies, of said signature data added to concents 
handling policies prescribing conditions for using said contents data 
and storing said identification information and said signature data 
added to said album handling policies .'Storing a plurality of said 
contents handling policies corresponding to said album contents data, 
sent from said information sending apparatus, and if it determines -hat: 
said album handling policies are correct data as a result of the 
rification, it omits verification of said signature data added to 
id contents handling policies stored in the album handling policies. 



ve 



73. The information receiving method according to claim 12, wherein 
said signature verifying step verifies said signature data added to 
the album price information, of said signature data added to contents 
price information showing a price for said contents data and said 
signature data added to the alburn price information data storing a 

plurality of said contents price information corresponding to said 
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album contents data, sent from said information sending apparatus, and 
if it determines that said album price information is correct data as 
a result of the verification, it omits verification of said signature 
data added to said concents price infoxaation stored in the album price 
in format ion . 

14. The information receiving method according to claim 73, wherein 
said signature verifying step verifies said signature dots added to 
said contents data encrypted by the content key, only when instructed 
to verify said signature data bailed on said signature verification 
information stored in the contents handling policies, of said contents 
data encrypted by said content key, said signature data added to said 
contents data encrypted by said content fcey and said contents handling 
policies storing signature verification information representing 
whether or not the signature data is verified, sent from said information 
sending apparatus. 

75. The information receiving, method according to claim 74, wherein 
said signature verifying step verities said signature data added to 
said album contents data, only when instructed to verify said signature 
data based on said signature verification information stored in the 
contents handling policies, of said album contents data, said signature 
data added to said album contents data and said contents handling 
policies aLviiisy l d signature verification information reprinting 
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whether or not the .signature data is verified, sent from said information 
sending apparatus. 

76. The information receiving method according to claim 73, wherein 
said signature verifying step verifies said signature data added to 
said contents data encrypted by said content key, only when instructed 
to verify said signature data based on said signature verification 
information stored in the contents price information, of said contents 
data encrypted by said content key, said signature data added CO said 
contents data encrypted by the content key, and said contents price 
information storing signature, verification information representing 
whether or not the signature data is verified, sent from said information 
sending apparatus- 

77. The information receiving method according to claim 7 6, wherein 
said signature verifying step verifies said signature data added to 
said album contents data, only when instructed to verify said signature 
data based on said .signature verification information stored in the 
contents price information, of said album contents data, aaid signature 
data added to the album contents data and said content-; price in format ion 
storing said signature verification information representing whether 
or not the signature data is veri lied, sent from said information sending 
apparatus . 
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said receiving step receives said contents handling policies 
prescribing that another specific contents data of said may be acquired 
only when said specific contents data is acquired. 

79. A program storage medium storing a predete.rmi.ned program and 
supplying Che program CO an information sending apparatus, 
characterized in that said program comprises: 

an identification information adding step of adding said 
identification information to said contents data in order to make a 
comparison with identification information for .identifying said 
information sending apparatus encrypted by a predetermined 
distribution key unique to said information receiving apparatus a:ui 
hii'ld in advance; and 

a sending step of sending to said information receiving apparatus 
said identification information encrypted by said distribution key 
together with said contents data with said identification information 
added . 

80. The program storage medium according to claim 79, characterised 
in that said program comprises: 

a handling policies generating step of generating contents 
handling policies prescribing conditions for using said content;:? data 
and storing said identification information; and 

a handling policies adding step of adding said contents handling 



policies to said contents data. 
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81. The program storage medium according to clam 79 wherein: 
said identification information adding step of said program adds 

said identification information to said contents data. 

82. The program storage medium according to claim 79, characterized 
in that said program comprises: 

a contents data encrypting step of encrypting said contents data 
by a predetermined content key; 

a contents key encrypting step oC encrypting said contents key 
by a predetermined individual key; 

a signature adding step of adding signature data for checking 
illegal data and tampering to said contents key encrypted by said 
individual key and s&ld identification information encrypted by said 
distribution key in said information receiving apparatus, 

S3. The program storage medium according to claim 82, wherein said 
Signature adding step of said program adds said signature data to said 
contents data encrypted by said content: key, and. if album contents data 
storing a plurality of said contents data encrypted by said content 
key to which said signature data is added is generated, it also adds> 
said signature data to the album contents data. 

04. The program storage medium according to claim 83, wherein said 
^ignnture adding step of sold program adds said signature data to saui 
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concents key encrypted by said indi vidual key and said identif i cat ion 
information encrypted by said distribution key respectively, and 
corresponding to said a lbum contents data, if album key data is generated 
by storing a plurality of the contents keys encrypted by said individual 
key and said identification information encrypted by said distribution 
key to which said signature data is added, .it also adds said signature 
data to the album key data, 

85. The program storage medium according CO claim 84, characterized 
in that said program comprises a handling policies generating step of 
generating contents handling policies prescribing conditions for using 
said contents data and storing said identification information, and 
wherein ; 

said signature adding step adds said signature data to said 
contents data handling policies, and corresponding to said album 
concents data, if album handling poUclcs are generated by storing a 
plurality of said contents handling policies to which said signature 
data is added, it also adds said signature data to the album handling 
policies . 

06. The program storage medium according UO claim HS, character:) zed 
in that said program comprises a price information creating step of 
creating contents price information showing a price for said contents 
data, and wherein: 



Application/Control Number: 09/831,071 
Art Unit: *** 



Page 39 



said signature adding step adds said signature data to said 
contents price information, and corresponding to said album contents 
data, if album price information data storing a plurality of said 
contents price information to which said signature data is added is 
generated, it also adds said signature data tc the album price 
information . 

67. The program storage medium according to claim 86 wherein; 
said handling policies generating step of said program generates 

said contents handling policies storing signature verification 
information representing whether or not said signature data added to 
said contents data encrypted by said content key is verified. 

68. The program storage medium according to claim 87 wherein: 
said handling policies generating step of said program generates 

said contents handling policies storing said signature verification 
information representing whether or not said signature data added to 
said album contents data is verified. 

89. The program storage medium according to claim 86 wherein: 

said price information creating step of said program creates said 
contents pr.icc information storing signature verification information 
representing whether or not said signature data added to said contents 
data encrypted by said content key is verified. 
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90. The program storage medium according to claim 89 wherein: 
said price information creating step of said program creates ScUd 

contents price information storing said signature verification 
information representing whether or not said signature data added to 
said album consents data is verified. 

91. The p tog ran storage medium according to claim 90 wherein: 
said handling policies generating step of said program generates 

said contents handling policies prescribing that another specific 
contents data of said may be acquired only when said specific contents 
data is acquired. 

1)2. A program storage medium for storing a pre determined program and 
supplying the program to an information receiving apparatus, 
characterized in that said program comprises: 

a receiving step of receiving predetermined contents data with 
identification information added no identity said information sending 
apparatus and said identification information encrypted by a 
predetermined distribution key unique to the information receiving 
apparatus sent froaa said information sending apparatus; 

a decrypting step of decrypting by said distribution key said 
identification information encrypted by the distribution key; and 

a comparing step of comparing said identification information 
added to said contents data with said decrypted identification 



;*n formation. 
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93. The program storage xediujn according to claim 92, characterised 
in that said program comprises a purchasing step of performing a 
purchasing procedure for said contents data; and wherein; 

said receiving step receives said contents data sent from said 
in formation sending apparatus and concents handling policies 
prescribing conditions for using said contents data added to the 
contents data and scoring said identification information; 

said comparing step compares said identification information 
stored in said contents handling policies with said identification 
information that is decrypted; and 

when said identification information compared in said comparing 
step mutually matches, said purchasing step performs said purchasing 
procedure of said contents data by using said contents handling 
policies. 

94. The program storage medium according to claim 92, wherein: 
said comparing step of said program compares said identification 

information directly added to 'said contents data with said 
identification information that is decrypted. 

95. The program storage medium according to claim 92, characterized 
in that said program comprises & signature verifying step of verifying 
signature data added to said content key encrypted by said individual 
key and said identification information encrypted said distribution 
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key sent fron* said information sending apparatus together with said 
contents data encrypted by a predetermined contents key and said 
contents key encrypted by a predetermined individual key, and detecting 
whether or not said content key encrypted by said individual key and 
said identification information encrypted said distribution Key ate 
illegal data and tampered data. 

96. The program storage medium according to claim 95, wherein a 
signature verifying step of said program verifies said signature dsta 
added to the album contents data, of said signature data added to said 
contents data encrypted by said content key and sard signature data 
added to album contents data storing a plurality of said contents data 
encrypted by said content Key, sent, from said information sending 
apparatus, and if it determines that said album contents data ±:t correct 
data as a result of the verification, it omits verification of said 
signature data added to each of said contents data encrypted by said 
content Key stored in the album contents data. 

97. The program storage medium according to claim 96, wherein said 
signature verifying step of said program verifies said signature data 
added to the album fcey data, of said signature data added said contents 
key encrypted by said individual key and said identification 
information encrypted by said distribution key respectively and said 
signature data added to album key data storing a plurality of said 

contents keys encrypted by said individual key and said ident J, taxation 
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information encrypted by said distribution key corresponding to said 
album contents da la, sent from said in format ion sending apparatus, and 
it it determines that said album key data is correct data as a result 
of the verification, it omits verification of said signature data added 
to said contents key encrypted by said individual key and said 
identification information encrypted by said distribution key stored 
in the album key data respectively. 

98. The program storage medium according to claim 97, wherein said 
signature verifying step of said program verifies said signature data 
added to the album handling policies, of said signature data added to 
contents handling policies proscribing conditions for using said 
contents data and storing said identification information and said 
signature data added to said aibuir. handling policies storing a plural i ty 
ct' said contents handling policies corresponding to said album contents 
data, sent from said information sending apparatus, and if i t determines 
that said album handling policies are correct data as a result ot the 
verification, it omits verification of said signature data added Co 
said contents handling policies stored in the album handling policies- 

S9. The program storage medium according to claim 98, wherein said 
signature verifying step of said program verifies said signature data 
added to the album price information, of said-signature data added to 
contents price information showing a price for said contents data and 



id signature data added to the album price information data sluiiny 
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a plurality of said contends price inforraation corresponding to said 
album contents data, sent from said information sending apparatus, and 
if it determines that said album price information is correct data as 
a result of the verification, it omits verification of said signature 
data added to said contents price information stored in the album price 
information . 

100. The program storage medium according to claim 99, wherein said 
signature verifying step of said program verifies said signature data 
added to said contents data encrypted by said content key, only when 
instructed to verify said signature data based on said signature 
verification information stored in the contents handling policies, of 
said contents data encrypted by said content key, said signature data 
added to said contents data encrypted by said content key and said 
contents handling policies storing signature verification information 
representing whether or not the signature data is verified, sent from 
said information sending apparatus. 

101 . The program storage medium according to claim TOO, wherein said 
signature verifying step of said program verifies said signature data 
added to said album contents data, only when instructed to verify said 
signature data based on said signature verification information stored 
in the contents handling policies, of said album contents data, said 
signsriir* data added to the albujn contents data and said contents 
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representing whether or not the signature data is verified, sent from 
said information sending apparatus. 

102. The program storage medium according to claim wherein said 
signature verifying step of said program verifies said signature data 
added to said contents data encrypted by the content fcey, only when 
instructed to verify said signature data based on said signature 
verification information stored in the contents price information, of 
said contents data encrypted by said content key, said signature data 
added to said contents data encrypted by the content key and said 
contents price information storing signature verification information 
representing -whether or not the signature data is verified, sent frorrt 
said 1 r i f o i m a t io n s e nd 1 ng appa r a tu s . 

103. The program storage medium according to claim 3 02, wherein said 
signature verifying step of said program verifies said signature data- 
added to the album contents data, only when instructed to verity said 
signature data based on said signature verification information stored 
in the contents price iriforinati.cn, of said album contents data, said 
signature data added to the album contents data and said contents price 
information storing said signature verification information 
representing whether or not the signature data is verified, sent from 
said in format, ion sending apparatus. 
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3.04. The program storage medium according tc claim 103, wherein said 
receiving step of said program receives said concents handling policies 
prescribing that receipt of another specific contents date* ol said is 
allowed only when said specific contents data is acquired. 

105. An information sending system for sending predetermined contents 
data from an information sending apparatus t;> an information receiving 
apparatus, wherein: 

said information sending apparatus comprises means for sending, 
together with said contents data, data of the maximum number of times 
of possible resending predefined to the contents data; and 

said information receiving apparatus comprises: 

cieans for receiving, together with said contents data, data of 
maximum number of times; 

means for generating data of the remaining number of times of 
possible resending of xn.id concents data based on said data of maximuir! 
number of times; and 

means for resending, that is, sending data of the remaining number 
of times together with said contents data. 

106. The information sending system according to claim 105, wherein: 
said means for generating data of the number of times of said 

information receiving apparatus generates, based on a nource of said 
contents data, a via-apparatus data shows ng an apparatus by way of which 



the contents data is sent; and 
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said means for reser.ding sends said via- apparatus data together 
with said contents data ar.d said data Of the remaining number or times. 

107. An information sending apparatus for sending predetermined 
contents data to an information receiving apparatus, comprising means 
for sending to said information receiving apparatus, together with said 
contents data, data of the maximum number of times of: possible resending 
predefined to the contents data. 

108. An information receiving apparatus Cot: receiving predetermined 
concents data sent from an information sending apparatus, comprising: 

means for receiving said contents data and data of the maximum 
number of times ot" possible resending predefined to the contents data, 
sent from said information sending apparatus; and 

means for generating data of the remaining number of times of 
possible resending of said contents data based on said data of maximum 
number of times; and 

means for resending, that; is, sending data of the remaining number 
of times together with said contents data. 

10.9. The information receiving apparatus according to claim 108, 
wherein: 

said means fox generating data of the number of times generates, 
based on a source of said contents data, a via -apparatus data showing 



an apparatus by way oi which Ok; i.:o»twH;.K dar.n *\y. shut.; 
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said means for resending sends said v.U- apparatus data together 
with said contents data and said data of the remaining number of times. 

.1.10. An information sending method for sending predetermined contents 
data from an information sending apparatus to an information receiving 
apparatus , comprising'. 

a sending .seep of sending by said information sending apparatus, 
together with said contents data, data of the znaximum number of times 
of possible re sending predefined to the contents data; 

a receiving step of, foy said information receiving apparatus, 
said data of maximum number of times together with said contents data; 

a nusnber of times data generating step of, by said information 
receiving apparatus, generating data of the reraainints number of times 
oi possible rescinding of said contents data based on said data of maximum 
number of times; and 

a res en ding stop of, by said information receiving apparatus, 
sending data of the remaining number of times together with said contents 
data . 

111. The information sending method according to claim 110, wherein: 
said number of times data generating step generates, based on 

a source of said contents data, a via- apparatus data showing an apparatus 

by way of ivhich the coritdnf.fi data is sent; and 

said resending step sends said via-apparatus data together with 

said contents data And said dsta of the remaining number of ritn^ft. 
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112. At. information sending method- for; sending predetermined contents 
data to an information receiving apparatus, comprising a sending step 
of sending to said information receiving apparatus, together with said 
contents data, data of the maximum number of zincs of possible resending 
predefined to the contents data. 

113. An information receiving method for receiving predetermined 
contents data sent from an information sending apparatus, comprising: 

a receiving stop of receiving said contents data and data of the 
maximum number of times of possible resending predefined to Che contents 
data sent from an ix: formation sending apparatus; 

a nanber of times data generating step of generating data of the 
remaining number of times o£ possible refunding of said contents data 
based on said data of maximum number of times; and 

a resending step of sending data of said regaining number of times 
together with said contents data. 

.114 . The information receiving method according to claim 1 13, wherein: 
said means for generating data of the number of times generates, 

based on a source of said contents data, a via-apparatus data showing 

an apparatus* by way of which the contents data is sent; and 

said means for re sending sends said via-apparAtus data together 

with said contents data and said data of the remaining number of times. 
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115. A program storage medium storing a predetermined program and 
supplying the program co an information sending apparatus, 
characterized in that said program comprises: 

a sending step of sending to the information receiving apparatus, 
together with predetermine contents data, data of the maximum number 
of times of possible r ©sending predefined to Che contents data. 

116. A program storage medium storing a predetermined program and 
supplying the program to an information receiving apparatus, 
characterized in that said program comprises: 

a receiving step ox receiving predetermined contents data and 
data of the maximum number of timers of possible resending predefined 
to the contents data sent from an information .sending apparatus; and 

a number of time:? data generating step of generating data of the 
remaining number of times of possible resending of said contents data 
based on said data of maximum number of times; and 

a resending step of sending data of the remaining number of times 
together with said contents data. 

117. The program storage medium according to claim U6, wherein: 
said means for generating data of the number oi times of said. 

program generates, based on a source of said contents data, a u la- 
apparatus data showing an apparatus by way of which the contents data 
is sent; and 
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said means for resending sends said via -apparatus data together 
with said contents data and said data of the remaining number of times. 

118. A recording and reproducing system for recording and reproducing 

by a recording and reproducing apparatus predetermined contents data 

sent from an information sending apparatus on a removable data storage 

apparatus, wherein: 

said information sending apparatus comprises: 

means for encrypting said contents data by a predetermined 

content key; and 

means for sending said content key and said contents data 

encrypted by the content key; and 

said recording and reproducing apparatus comprise:*: 

means for receiving said content key and said contents data 

encrypted by the content key sent from said Information sending 

apparatus; 

means for controlling recording and reproducing for sending out 
the received content key and said contents data encrypted by the content 
key to said data storage apparatus and having them recorded thereby 
or having said content key and said contents data encrypted by the 
content key reproduced from said data storage apparatus to read them; 
and 

said data storage apparatus comprises: 
a o red eh fir rained re* cord medium; 



means for holding a predetermined save key; 
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means for encrypting a content key by said save Key; 

means for recording and reproducing, that is, recording said 
content key encrypted by said save key and said contents data encrypted; 
by the content key on said record medium or reproducing said content; 
key encrypted by said save key and said contents data encrypted by the 
content key from the record medium; and means tor decrypting by said; 
save key said content key encrypted by the save key. | 

119. The recording and reproducing system according to claim j 
wherein said means for holding a save key is tamper resistant in said: 
data storage apparatus. \ 

120. The recording and reproducing system according to claim 119, \ 
wherein said means for controlling recording and reproducing liroits| 
said data storage apparatus as to reproduction of said contents data- 
encrypted by said content key recorded on said record medium. ■ 

121. The recording and reproducing system according to claim 120, | 
wherein said limitation of reproduction is the number of. times of 
possible reproduction of said contents data. 

122. The recording and reproducing system according to claim 120, 
wherein said limitation of reproduction is the period of possible : 
reproduction of said contents data. 
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123. The recording and reproducing system according to claim .1.16, 
wherein said recording and .reproducing apparatus comprises means for 
decrypting contents, that is, decrypting by using said content key said 
concents data encrypted by the content key read £rom said data storacc 
apparatus . 

124. The recording and reproducing system according to claim 1.18, 
comprising means tor controlling reproducing for having said content 
key and said contents data encrypted by the content key reproduced from 
said record medium of said dais storage apparatus to read them, and 
has a reproducing apparatus on which said data storage apparatus IS 
mounted in a removable manner. 

125. The recording and reproducing systen according tc claim 124, 
wherein said reproducing apparatus comprises means for decrypting 
contents, that is, decrypting by said content key said contents data 
encrypted by the content key read from said data storage apparatus. 

126. The recording and reproducing system according to claiiu 124, . 
wherein said means lor controlling reproducing limits said data storage 
apparatus as to reproduction of said contents data encrypted by said 
content key recorded on said record medium. 
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127. The recording and reproducing system according to claim 126, 
wherein said limitation of reproduction is the riuir.be r of: times of 
possible reproduction of said contents data. 

128. The recording and reproducing system according to claim 126, 
wherein said limitation of reproduction is the period of possible 
reproduction of said contents data. 

120. The recording and reproducing system according to claim 1.13, 
wherein said means for holding a save key of said data storage apparatus 
stores said save key unique to said data storage apparatus. 

130. A recording and reproducing apparatus to which a data storage 
apparatus having a predetermined record medium is provided in n 
removable manner, comprising: 

means for sending out contents data encrypted by a predetermined 
content key and Che content key to said data storage apparatus; 

means for controlling recording and reproducing, that is, • 
encrypting said content key by a predetermined save key and recording 
said contents data encrypted by said content key on said record medium, 
or reproducing said content key encrypted by said save key and said 
contents data encrypted by the content key froin the record medium and 
decrypting by said save key said content key encrypted key by the save 
key; and 
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means for reading said content key and said contents data 
encrypted by the content key from said data storage apparatus. 

131. The recording and reproducing apparatus according to claim 130, 
comprising means for decrypting contents, that is, decrypting by using 
said content >;ey said contents data encrypted by the content key read 
from said data storage apparatus. 

132. The recording and reproducing apparatus according to claim 130, 
wherein said means for controlling recording and reproducing limits 
said data storage apparatus as to reproduction of said contents data 
encrypted by said content key recorded on said record medium. 

133. The recording and reproducing apparatus according to claim 132, 
wherein 3d id limitation of reproduction is the number of times of 
possible reproduction of said contents data. 

134 . The recording and reproducing apparatus according to claim 132, 
wherein said limitation of reproduction is the period of possible 
reproduction of said contents data. 

135. The recording and reproducing apparatus according to claim 130, 
wherein said means for controlling recording and reproducing encrypts 
or decrypts said content key by using said save key unique to said data 



storage apparatus. 
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1.36. A reproducing apparatus to which a data storage apparatus having 
a predetermined record medium is provided in a removable manner, 
comprising: 

means for controlling reproducing, that is, reproducing contents 
data encrypted by a predetermined content key and said content key 
encrypted by a predetermined save key recorded in advance on said 
record medium, and decrypting by using said save key sold content key 
encrypted by Che save key; and 

xiean$ for reading said content key and said contents data 
encrypted by the content key from said data storage apparatus. 

137. The reproducing apparatus according no claim 136, comprising 
means for decrypting contents, that is. decrypting by using said content 
key said contents data encrypted by the content key read from said data 
storage apparatus. 

138. A reproducing apparatus according to claim 136, wherein said 
means for controlling reproducing limits said data storage apparatus 
as to reproduction of said contents data encrypted by said content key 
recorded on said record medium. 

139. The reproducing apparatus according to claim 138, wherein said 
limitation of reproduction is the number of times of possible 
reproduction of said contents data. 
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140. The reproducing apparatus according to claim 133, wherein said 
limitation of reproduction is the period of possible reproduction of 
said contents data . 

141. The reproducing apparatus according to claim \ 36, wherein said 
means tor controlling reproducing decrypts said content key by using 
said save key unique to said data storage apparatus. 

142. A data storage apparatus provided to a recording and/or 
reproducing apparatus in a removable manner for recording and/or 
reproducing predetermined data under control of the recording and/ or 
reproducing apparatus, comprising: 

<i predetermined record medium; 

means tor saving a predetermined save key; 

means for communication for sending and receiving predetermined 
content data encrypted by a predetermined content key and the content 
key to and from said recording and/or reproducing apparatus; 

means for encrypting said contents key by said save key under 
control of said recording and/or reproducing apparatus; and 

means for recording and reproducing, that is, under control of 
said recording and/ or reproducing apparatus, recording said content 
key encrypted by said save key and said contents data encrypted by the 
content key on said record medium or reproducing said content key 
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encrypted by said save key and said contents data encrypted by the 
content key from the record medium; and 

means for decrypting by using said save key said content key 
encrypted by the save key under control of said record! nc end/ or 
reproducing Apparatus . 

143. The data storage apparatus according to claim 142, wherein said 
means for holding a save key is tamper resistant. 

144. The data storage apparatus according to claim 142, wherein said 
sioans for recording and reproducing Units reproduction of said 
contents data encrypted by sale* content key recorded on said record 
medium. 

14 5. The data storage apparatus according to claim 144, wherein said 
limitation or reproduction is the number of times of possible 
reproduction of said contents data. 

146. The data storage apparatus according tc claim 144, wherein sa.i<J 
limitation of reproduction is the period of possible reproduction of 
said contents data. 

147. The data storage apparatus according to claim 142, wherein said 
means for recording and reproducing encrypts or decrypts said content: 

Key by using sold save koy uniqiif* ro said data storage apparatus. 
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IAB . The recording end reproducing method of recording and reproducing 
predetermined contents data sent from an information sending apparatus 
on a removable data storage apparatus by a recording and reproducing 
apparatus, comprising: 

a concents encrypting step ol, by said information sending 
apparatus, encrypting said contents data by a predetermined content 
key; 

a sending step of, by said information sending apparatus, sending 
said content key and said contents data encrypted by the content key; 

a receiving step of, by said recording and reproducing apparatus, 
receiving said content key and said contents data encrypted by the 
content key sent .from said into x mar. ion sending apparatus; and 

a recording and reproducing controlling step of, by said 
recording and reproducing apparatus, sending out said content: key and 
the contents data encrypted by the content key to said data storage 
apparatus and encrypting said content key by a save key held in advance 
on said data storage apparatus to record it on a record medium of said 
data storage apparatus together with said contents data encrypted by 
the content key, or reproducing said content key encrypted by said save 
key and sa id contents data encrypted by the content key from the record 
medium, and from said data storage apparatus, decrypting by said save 
key the content key encrypted by said save key CO read it together with 
said contents data encrypted by said content key. 
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149. The recording and reproducing method according to claim 148, 
wherein snid recording and reproducing controlling step uses fcr 
recording and reproducing said content fcey said save key hold by 
predetermined tamper resistant means for holding a save key it*, said 
data storage apparatus. 

150. The recording and reproducing method according to claim 148, 
wherein said recording and reproducing controlling step limits 
reproduction of said contents data encrypted by said consent >;ey 
recorded on. said record medium ol said data storage apparatus. 

1^1. The recording and reproducing method according to claim 150, 
wherein said recording and reproducing control ling step limits the 
number of times of possible reproduction as limitation of reproduction 
of. Raid contents data encrypted by said content key recorded on said 
record medium of said data .storage apparatus. 

152. The recording and reproducing method according to claim 150, 
wherein said recording and reproducing controlling step limits Che 
period of possible reproduction as limitation of reproduction of said 
contents data encrypted by said content key recorded on said record 
medium of said data storage apparatus. 

153. The recording and reproducing method according to claim 14$, 
coiiipri^inu a contents decrypting step of decrypting by using said 
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content key said contents data encrypted by the content key read from 
said data storage apparatus 'oy said recording and reproducing 
apparatus . 

154. The recording and reproducing method according to claim IA8, 
wherein said recording and reproducing controlling step encrypts or 
decrypt^ said content key by using said save key unique to said data 
storage apparatus. 

155. The recording and reproducing method according to claim 148, 
coiaprising a reproducing controlling step of, by a reproducing 
apparatus on which said data storage apparatus is mounted in a removable 
manner, reproducing and reading said content key and said contents data 
encrypted by the content key from said record medium of Raid data storage 
apparatus . 

156. The recording and reproducing method according to ciaira .155, 
wherein said reproducing controlling step limits reproduction of said 
contents data encrypted by s&ld content key recorded on said record 
medium of said data storage apparatus. 

157. The recording and reproducing method according to claim 156, 
wherein said reproducing controlling step .Limits the number of. times 
of possible reproduction as .1. x mi tat.- on or reproduction of said uuntcuta 
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data encrypted by said content key recorded on said record medium of 
said data storage apparatus. 

1SB. The recording and reproducing method according to claim 156, 
wherein said reproducing controlling step limits the period of possible 
reproduction as limitation of reproduction of said contents daea 
encrypted by said content key recorded on said record medium of said 
data storage apparatus. 

159. The recording and reproducing method according to claim .156, 
comprising a contents decrypting step of decrypting by using said 
content key said contents data encrypted by Che content key read from 
sold data storage apparatus by said reproducing apparatus. 

100. The recording and reproducing method according to claim 155, 
wherein said reproducing controlling step decrypt:? :*aid content key 
by using said save key unique to said data storage apparatus. 

161. A recording and reproducing method tot: recording arid reproducing 
predetermined contents data on a record medium of a data storage 
apparatus provided in a removable manner to a recording and reproducing 
apparatus, comprising: 

a sending out step of sending out contents data encrypted by a 
predetermined content Key and the content Key from said recuiding and 

itjptoducing apparatus to 3 A id data storage apparatus; 
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a recording and reproducing step of, under control of said 
recording and reproducing apparatus, encrypting said concent key by 
a predetermined save key and recording said content key together with 
said contents data encrypted by said content key on said record medium, 
or reproducing said concent key encrypted by said nave key and said 
contents data encrypted by the content key from the record medium and 
decrypting by using said save key said content key encrypted by the 
save key; and 

a reading step oi' reading said decrypted content key and said 
contents data encrypted by said content key from said data storage 
apparatus to said recording and reproducing apparatus. 

162. The recording and reproducing method according to claim 161, 
comprising a contents decrypting step of decrypting by using said 
content key said contents data encrypted by the content key read froiti 
sai d data storage apparatus by So id recording and reproducing 
apparatus . 

163. The recording and reproducing method according to claim 161, 
wherein said recording and reproducing step limits reproduction of said 
contents data encrypted by said content key recorded on said record 
medium of said data storage apparatus under control of said recording 
and reproducing apparatus. 
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164. The recording and reproducing method according zo claim 3 63, 
wherein said recording and reproducing step limits the number of times 
of possible reproduction as limitation of reproduction of said contents 
data encrypted by said concent key recorded on said record medium of 
said data storage apparatus under control of said recording and 
reproducing apparatus. 

165. The recording and reproducing method according to claim 163, 
wherein said recording and reproducing step limits the period of 
possible reproduction as limitation of reproduction of said contents 
data encrypted by said content key recorded on said record medium of 
said data storage apparatus under control of said recording and 
reproducing apparatus. 

166. The recording and reproducing method according co ciairo 161, 
wherein said recording and reproducing step encrypts or decrypts said 
content key by using said save key unique to said data storage apparatus. 

167. A reproducing method for reproducing predetermined content:? data 
from a record medium of a data storage apparatus provided in a removable 
manner to a reproducing apparatus, comprising: 

a reproducing step of, under control of said reproducing 
apparatus, reproducing contents data encrypted by a predetermined 
content key recorded in advance and said content key encrypted by a 
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predetermined save key from said record medium of said data storage 
apparatus; 

a decrypting step of decrypting by using said save key said content 
key encrypted by the save key under control of said reproducing 
apparatus; and 

a reading step of. reading said content >:ey and said contents data 
encrypted by said content key from said data storage apparatus to said 
reproducing apparatus. 

163. The reproducing method according to claim 167, comprising a 
contents decrypting step of: decrypting by using said content key said 
contents data encrypted by the content key read from said data storage- 
apparatus fcy said reproducing apparatus. 

163. The reproducing method According to claim 167, wherein said 
reproducing step limits reproduction of said contents data encrypted 
by said corjtent key recorded on said record medium of said data storage 
apparatus under control of said reproducing apparatus. 

170. The reproducing method according to claim 16.9, wherein said 
reproducing step limits the number of times of possible reproduction 
as limitation of reproduction of. said contents data encrypted by said 
content key recorded on said record medium of said data storage apparatus 
under control of said reproducing apparatus. 



Application/Control Number: 09/831,071 
Art Unit: *** 



Page 66 



171. The reproducing method according to claim 169, wherein said 
reproducing step limits the period of possible reproduction as 
limitation of reproduction of: said contents data encrypted b y said 
content key recorded on said record medium of said data storage apparatus 
under control of said reproducing apparatus. 

112. The reproducing method according to claim 167 , wherein said 
decrypting .step decrypts said content key by using said save key unique 
to said data storage apparatus. 

173. A program storage medium storing a predetermined program and 
supplying the program to a recording and reproducing apparatus, wherein 
said program comprises: 

a sending out step of sending out contents data encrypted by a 
predetermined content key and the content; key to a data storage apparatus 
provided in a removable manner to said recording and reproducing 
apparatus; 

a recording and reproducing controlling step of controlling said 
data storage apparatus for encrypting said content key by a 
predetermined save key and recording it together with said contents 
data encrypted by said content key on a predetermined record medium 
of said data storage apparatus, or reproducing said content key 
encrypted by 3aid save key and said contents data encrypted by the 
content key from the record medium and decrypting by using said save 

key said content key encrypted by the save key; and 
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a reading step of reading said decrypted content key and said 
contents date encrypted by said content hey froia said data storage 
apparatus . 

17<J. The program storage medium according to claim 173, wherein- said 
program comprises a contents decrypting step of decrypting by using 
said content key said contents data encrypted by the content key read 
from said data storage apparatus. 

175. The program storage medium according to claim 173, wherein said 
recording and reproducing controlling step oi said program lira Us 
reproduction of said contents data encrypted by said content key 
recorded on said record medium of said data storage apparatus under 
control of said recording and reproducing apparatus. 

176. The program storage medium according to claim .175, wherein said 
recording and reproducing controlling step of said program limits the 
number of times of possible reproduction as limitation of reproduction 
of said contents data encrypted by said content key recorded on said 
record medium of said data storage apparatus under control of said 
recording and reproducing apparatus. 



177. The program storage mediae according to claim 175, wherein said 
recording and reproducing controlling step of said program limits the 



period of possible reproduction as limitation of reproduction of said 
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contents data encrypted by said content: key recorded on said record 
mediun of said data storage apparatus under control of said recording 
and reproducing apparatus. 

178. The program storage medium according to claim U3, wherein said 
recording and reproducing controlling step of said program encrypts 
or decrypts said content key by using said save key unique to said data 
storage apparatus. 

179. A program storage medium storing a predetermined program and 
.supplying the program to a reproducing apparatus, characterized in that 
said program comprises: 

a reproducing controlling step of controlling said data storage 
apparatus for reproducing contend data encrypted by a predetermined 
content, key and said content key encrypted by a predetermined save key 
recorded in advance from the record medium of a data storage apparatus 
provided in a removable manner to said reproducing apparatus; 

a decrypting controlling step of controlling said data storage 
apparatus for decrypting by using said save key said content key 
encrypted key by the save key; and 

a reading step of reading said content key and said contents data 
encrypted by said content key from said data storage apparatus. 

.180. Th« program storage medium according to claim 179, wherein said 



program comprises a contents decrypting step of decrypting by using 
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said content key said contents data encrypted by said content key read 
from said data storage apparatus by said reproducing apparatus. 

181. The program storage medium according to claim 17S, wherein said 
reproducing controlling step of said program limits reproduction of 
said contents data encrypted by said content key recorded on said record 
medium of said data storage apparatus. 

192. The program storage medium according to claim 181, wherein said 
reproducing controlling step of .said program limits the number of times 
of possible reproduction as limitation of! reproduction oi said contents 
data encrypted by said content key recorded on said record medium of 
said data storage apparatus. 

1B3_ The program storage medium according to claim 18I r wherein said 
reproducing controlling step of said program limits the period of 
possible reproduction as limitation of reproduction of said contenta 
data encrypted fay said content key recorded on said record medium of 
said data storage apparatus. 

184. The program storage medium according to claim 179, wherein said 
decrypting controlling stej? of said program decrypts said content key 
by using said save key unique to said data storage apparatus. 
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185. A program storage medium storing a predetermined program and 
supplying the program to a data storage apparatus, wherei n said program 
comprises : 

a receiving step ot receiving contents data encrypted by a 
predetermined content key and the content key sent: from a recording ; 
and reproducing apparatus to which said data (Storage apparatus is 
provided in a removable manner; 

a recording and reproducing step of, under control of said ■ 

i 

recording and reproducing apparatus, encrypting said content key by j 

j 

a predetermined save key and recording it together with said contents | 
data encrypted by said content key on a predetermined record medium | 

of said data storage apparatus, or reproducing said content key j 

I 

encrypted by said save key and said contents data encrypted by the i 
content key from the record medium and decrypting by using said save j 

kev said content key encrypted key by the save key; and j 

j 

a sending step of sending a a Id content key and said contents data ; 
encrypted by said content key to said recording and reproducing \ 
apparatus . ; 

186. The program storage medium according to claim 1.85, wherein :satd ( 
recording and reproducing step of said program limits reproduction of s 
said contents data encrypted by said content key recorded on said record ' 
medium of said data storage apparatus under control of said recording ; 

i 

and reproducing apparatus. i 
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1B1, The program storage medium according to claim 106, wherein said 
recording and reproducing step of said program limits the number of 
times of possible reproduction as limitation of reproduction of said 
contents data encrypted by said content key recorded on said record 
medium of said data storage apparatus under control, of said recording 
and reproducing apparatus. 

108. The program storage medium according to claim 136/ wherein said 
recording and reproducing step of said program limits the period of 
possible reproduction as limitation of reproduction of said contents 
data encrypted by said content key recorded on said record medium of 
said data storage apparatus under control of. said recording and 
reproducing apparatus. 

139. The program storage medium according to claim 18b, wherein said 
recording and reproducing step of said program encrypts or decrypts 
said content key by using said save key unique Co said data storage 
apparatus. 

190. A program storage medium storing a predetermined program and 
supplying the program to a data storage apparatus, wherein said program 
comprises : 

a reproducing step of:, under control of a reproducing apparatus 
to which said data storage apparatus is provided in a removable manner, 

reproducing contents data encrypted by a predetermined content key and 
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said concent key encrypted by a predetermined save key recorded in 
advance from the record medium of said data storage apparatus; 

a decrypting step of decrypting by using said save key said content 
key encrypted by the save >;ey under control of! said reproducing 
apparatus; and 

a sending step of sending said content hey and said contents data 
encrypted by said content key to said reproducing apparatus. 

191. the program storage medium according to claim 190, wherein said 
reproducing step of said program llsitts reproduction of sai« concents 
data encrypted by .said content key recorded on said record medium uncer 
control of said reproducing apparatus. 

192. The program storage medium according to cLaim 191, wherein said 
reproducing step of said program limits the number of times of possible 
reproduction as limitation cf reproduction of said contents data 
encrypted by said content key recorded on said record medium under 
control of said reproducing apparatus. 

193. The program storage medium according to claim '3S:L, wherein said 
reproducing step of said program limits the period of possible 
reproduction as limitation of reproduction of said contents data 
encrypted by said content: key recorded on aaid record medium under 
control of said reproducing apparatus. 
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194. The program storage medium according to claim 190, wherein said 
decrypting seep of said program decrypts said content key by using said 
save key unique to said data storage apparatus. 

3 95. A data management system, comprising: 

a removable data storage apparatus having a predetermined record 
medium; 

a recording apparatus for recording predetermined contents data 
on said record medium oE said data storage apparatus; and 

a management apparatus, connected to various apparatuses, for 
capturing contents data recorded on a record medium of said data storage 
apparatus and managing movement of the contents data to various 
apparatuses in piace of said data storage apparatus. 

196. The data management system according to claim 19S, wherein said 
recording apparatus comprises: 

means tor sending said concents data encrypted by a predetermined 
content key, the content key, and handling policies prescribing the 
conditions for using the content Key to said removable data storage 
appa ratus; and 

means for controlling recording, that is, controlling said data 
Storage apparatus for prescribing the rights to utilize said contents 
data based on said handling policies and having license conditions 
information storing identification information tor identifying a 



holder of the contents data created so as to record the license 



Application/Control Number: 09/831,071 
Art Unit: *** 



Page 74 



conditions inf ormation, said contents data encrypted by said contend 
key, the content key and said handling policies on said record medium; 
and 

said management apparatus comprises: 

means for capturing, chat is, reproducing and capturing said 
contents data encrypted by said content key. the concents key, and said 
license conditions information tram said record medium of said data 
storage apparatus; and 

means for managing movement, that is, updating said license 
conditions information by changing said identification information, 
and moving said contents data encrypted by said content key and the 
content key together with said updated license conditions information 
to various apparatuses. 

191. The data management system according to claim 196, wherein said 
means for capturing of said management apparatus capture?-; said license 
conditions information, said contents data encrypted by said content 
key and the content key returned based on the license conditions 
information from said various apparatuses* 

19B. The data management system according to claim 196, wherein: 

said means for controlling recording of said recording apparatus 
prescribes the rights to utilize said contents data based on said 
handling policies and has said license conditions information storing 
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said identification information unique i:o said data storage apparatus 
cheated; and 

said means for rcanaging movement of said management apparatus 
updates said license conditions information by changing said 
identification information unique to said data storage apparatus in 
said license conditions information to said identities ion information 
unique to said management apparatus. 

199, The data management system according to claim 198, wherein: 
said means for sending of said recording apparatus sends price 

' information of said contents data in addition to said contents data 
encrypted by said content key, the content key, and said handling 
policies to said dot a .storage apparatus ; 

said means for controlling recording has accounting information 
for purchase of said contents data generated by said data storage 
apparatus based on said hand Ling policies and said price Information 
to be held in a predetermined memory; and 

said means tor capturing of said management apparatus captures 
said accounting information together with said contents data encrypted 
by said content key, the contents key, and said license conditions 
information. 

200. The data management system according Uo claiia 199. wherein: 
said means for capturing of said management aupaidtuiif captures 

said content key encrypted by a tempo; <uy key shared between said 
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management apparatus and said data storage apparatus and said 
accounting information encrypted by the temporary key. 

201. The data management' system according CO claim 200, wherein: 
said means tor capturing of said management apparatus captures 

said accounting information to which signature data is added after being 
encrypted by said temporary key from said data storage apparatus. 

202. A management apparatus connecting various apparatuses with * 
predetermined removable data storage apparatus, comprising: 

means Cor capturing, tbat is, reproducing and capturing 
predetermined contents data recorded on a record medium of said d£C£ 
storage apparatus-; and 

means for managing movement of said contents data to various 
apparatuses in place of said data storage apparatus. 

203. The management apparatus according tc claim 202, wherein: 
said means for capturing capture* said contents data encrypted 

by a predetermined content key, the content key, and license conditions 
information prescribing the rights to utilize said contents data 
generated based on handling policies prescribing the conditions for 
using the content key and storing identification information for 
identifying a holder of the contents data from said record medium of 
said data storage apparatus; and 
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said means for managing movement updates said license conditions 
information by chanqing said identification information, and moves said 
contents data encrypted by said content key and rhe content key together 
with said updated license conditions information to various 
apparatuses . 

204. The management apparatus according to claim 202, wherein: 
said means for capturing captures the license conditions 

information, said contents data encrypted by said contents key and the 
content key returned from said various apparatuses based on said license 
cond i t i o n s in forma t i o n . 

205. The management apparatus according to claim 203, wherein: 
said means for capturing captures said license conditions 

information storing said identification information unique to said data 
storage apparatus; and 

said means for managing movement updates said license conditions 
information by changing said identification information unique to said 
data storage apparatus in said license conditions information to said 
identification information unique to said management apparatus. 

206. The management apparatus according to ciai*t» 205, wherein: 
said means for capturing captures accounting information for 

purchase of sairi contents data generated based on said handling policies 
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and price information of said contents data from sale data storage 
apparatus. 

207. The management apparatus according to claim 206, comprising means 
Cor decrypting by a temporary key predetermined data encrypted by the . 
temporary key shared between said management apparatus and said data 
storage apparatus; and wherein: j 

said means for capturing captures said content key encrypted by \ 
said temporary key and said accounting information encrypted by Che i 
temporary key from said data storage apparatus; and 

said means tor decrypting decrypts by said temporary key said ; 
content key and said accounting information encrypted by said temporary j 
key respectively. ! 

208 . The management apparatus according to claim 207, comprising means ! 
for detecting, that is, verifying signature data added to predetermined j 
data and detecting whether or not said data Is tampered; and wherein: : 

S33d means for capturing captures said accounting information 
to which signature data is added after being encrypted by said temporary : 
key from said data storage apparatus; and 

said means for detecting verifies said signature added to said | 
accounting information encrypted by said temporary key. 

209. A removable data storage apparatus having a predetermined record | 



medium, comprising: 
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means for receiving concents data encrypted by a predetermined 
content key, the content hey, and handling policies prefer ibinq the 
conditions for using the content key sent f com a predetermined recording 
apparatus when connected Co the recording apparatus; 

means ?or creating information, that is, creating license 
conditions information prescribing the rights to utilize said contents 
data based on said handling policies and storing identification 
information for identifying a holder of the contents data under control 
of said recording apparatus; 

means for recording on said record medium said license conditions 
information, said contents data encrypted by said content hey, the 
concents key and said handling policies under control of ft a ad recording 
apparatus; 

means for, when connected to a management apparatus for managing 
movement of said contents data to various apparatuses, reproducing said 
contents data encrypted by said content key, the content key and said 
license conditions information from said record medium under control 
of said management apparatus; and 

means for sending to said management apparatus said license 
conditions Information for managing said contents data together with 
said contents data encrypted by said content key and the content key 
so as to shift management of said contents data under control of said 
management apparatus. 
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said means for creating information creates license conditions 
information Cor prescribing the rights to utilize said contents data 
based on said handling policies and .storing changeable identif ication 
information for identifying a holder of the contends data. 

211. The data storage apparatus according to claim 210, wherein: 
said means for creating information creates said license 

conditions information storing said identification information unique 
to said data storage apparatus. 

212. The data storage apparatus according to claim 211, wherein: 
said moans for receiving receives contents data encrypted by said 

content key, the content fcey and price information of said contents 
data senc together with said handling policies from said recording 
apparatus; and 

said means for creating information creates accounting 
information for purchase of said contents data based, on said handling 
policies and said price information and records it in a predetermined 
memory. 

213. The data storage apparatus according to claim 212, wherein: 
said means for creating information records said accounting 

information in said memory that: is tamper .resistant. 
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2.14. The data storage apparatus according to claim 213, comprising 
means for encrypting said content key by a temporary key shared with 
said management apparatus and also encrypting said accounting 
information by the temporary key; and 

said means for sending sends to said management apparatus said 
content: fcey encrypted by .said temporary key arid .said accounting 
information encrypted by said temporary key together with said contents 
data encrypted by .said content key and said license conditions 
information. 

215. The data storage apparatus according to claim 214, comprising 
means for adding signature data for verifying whether or not tampering 
is performed to said accounting information encrypt eu by said temporary 
key; and wherein: 

said means for sending sends to said management apparatus said 
accounting information encrypted by .said temporary key with signature 
data added together with said contents data encrypted by said content 
key, said license conditions information and said content key encrypted 
by 3a Ad temporary key. 

216. A. data management method, comprising: 

a sending step of sending predetermined contents data to a 
removable data storage apparatus by a predetermined recording 
apparatus; 
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a recording step of recording said contents data on a record medium 
of said data storage apparatus under control of said recording 
apparatus; 

a capturing step of reproducing and capturing said contents data 
from the record medium of said data storage apparatus by a management 
apparatus connected to various apparatuses; and 

a movement managing step of managing movement of said contents 
data to various apparatuses by a management apparatus in place of said 
data storage apparatus, 

217. The data management method according to claim 216, wherein: 
said sending arep sends to said data storage apparatus said 
contents data encrypted by a predetermined content key, the content 
key and handling policies prescribing conditions for using the content 
key; 

said recording step records on said record medium said contents 
data encrypted by said content key, the convent key and handling policies 
prescribing conditions for using the content key, and also has license 
conditions information prescribing the rights to utilize said contents 
data based on said handling policies and storing identification 
information for identifying a holder of the contents data created by 
said data storage apparatus and records it on said record medium; 

said capturing step reproduces and captures said contents data 
encrypted by said content key, the content key and said license 
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conditions information from said record medium of said data storage 
apparatus; and 

said movement managing step updates said license conditions 
information by changing said identification information, and mover, said 
contents data encrypted by said content key and the content key together 
with said updated license conditions information to said various 
apparatuses . 

218. The data management: method according to claim 217, comprising: 
& capturing step of capturing the license conditions information, 
said contents data encrypted by said concent key and the content key 
returned from said various apparatuses based on said identification 
information by said management apparatus. 

212. The data management method according to claim 217, wherein: 

said recording step creates said license conditions information 
prescribing the rights to utilise said contents data based on said 
handling policies and storing said identification information unique 
to said data storage apparatus; and 

said movement managing step updates said license conditions 
information by changing said identification information unique to said 
data storage apparatus in said license conditions information to said 
identification information unique to said management apparatus. 
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said sending step sends to said data storage apparatus price 
information of said concents data in addition to said contents data 
encrypted by said content key, the content key and said handl ing policies 
from said recording apparatus; 

said recording step has accounting information for purchase of 
said contents data generated by said data storage apparatus based on 
said handling policies and said price information and holds it in a 
predetermined memory; and 

said capturing step captures said accounting information 
together with said contents data encrypted by said content key, the 
contents key, and said license conditions information. 

221. The data management method according to claim 220, wherein: 
said capturing step captures, after being reproduced from said 

record medium of said data .storage apparatus, said content key encrypted 
by a temporary key shared between said management apparatus and said 
data storage apparatus and said accounting information encrypted by 
the temporary key. 

222. The data management system according to claim 221, wherein; 
said capturing step captures said accounting .information to which 

signature data is added after being encrypted by said temporary key 
from said data storage apparatus. 
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223. A data management; method wherein various apparatuses are 
connected with a predetermined removable data storage apparatus, 
comprising: 

a capturing step of reproducing and capturing predetermined 
concents data recorded on a record medium of said data storage apparatus; 
and 

a movement managing step of managing movement of said content £ 
data to various apparatuses in piace of said data storage apparatus. 

224. The data management method according to claim 223, wherein: 
said capturing step captures said contents data encrypted by e 

predetermined content key, the content key, and .license conditions 
information prescribing the rights to utilize said con ten ty data 
generated based on handling policies prescribing the conditions for 
using the content key arid storing identification information for 
identifying a holder oi 7 the contents data rrom a a id record medium of. 
said data storage apparatus; and 

said movement managing step updates said license conditions 
in format ion by changing said identification information, and moves said 
contents data encrypted by said content key and the content key together 
with said updated license conditions information to said various 
apparatuses. 

225. The data management method according to claim 223, wher«in: 
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said capturing step captures the license conditions information, 
said contents data encrypted by said contents key and »:he content key 
returned from said various apparatuses based on said license conditions 
information . 

226. The data management method according to clsim 224, wherein: 

said capturing stop captures said l icense conditions information 
storing said identification information unique to said data s CO rage 
apparatus; and 

said movement managing step updates said license conditions 
information by changing said identification information unique to said 
data storage apparatus in said license conditions information to said 
identification information unique to said management apparatus. 

221. The data management method according to claim 226, wherein: 

said capturing step captures accounting information for purchase 
of said contents data generated based on said handling policies and 
price information of said contents data from said data storage 
apparatus . 

223. The data management method according to claim 227 , comprising: 
a decrypting step of decrypting by a temporary key predetermined 
data encrypted by the temporary key shared between said management 
apparatus and said data storage apparatus; and wherein: 



Application/Control Number: 09/831,071 
Art Unit: *** 



said capturing step captures said concent key encrypted by said 
temporary key and said accounting information encrypted by the 
temporary key from said data storage apparatus; And 

said decrypting step decrypts by said temporary key said content 
key and said accounting information encrypted by said temporary key 
respectively . 

229. The data management method according to claim 228, comprising 
a detecting step of verifying signature data added to predetermined 
data and detecting whether or not said data is tampered; and wherein: 

said capturing step captures said accounting information to which 
signature data is added after being encrypted by said temporary key 
from said data storage apparatus; and 

said detecting step verifies said signature added to said 
accounting information encrypted by said temporary key. 

230 . A data management and movement method for a removable data storage 
apparatus having a predetermined record medium, comprising: 

a receiving step of receiving contents data encrypted by a 
predetermined content key, the content key, and handling policies 
prescribing the conditions for using the content key sent £rcra a 
predetermined recording apparatus to said data storage apparatus; 

an information creating step of creating license conditions 
information prescribing the right? to utilize said contents data based 



3n said handling policies ^ nr1 **r<~'*'* i ng i n>.nhi 1:icafr.i.on .information lor 
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identifying a holder of the contents data under control o£ said recording 
apparatus; 

a recording step of recording on said record medium said license 
conditions information, said contents data encrypted by said content 
key, Che contents key and said handling policies under control of said 
recording apparatus ; 

a reproducing step of, when said data storage apparatus is 
connected to a management apparatus for managing movement of said 
contents data to various apparatuses, reproducing said contents data 
encrypted by said concent key, the content key and said license 
conditions information from said record ine&ium under control of the 
management apparatus; and 

a sending step of sending to said management apparatus said 
license conditions information tor managing said contents data together 
with said, contents data encrypted by said content fcey and the content 
key from said data storage apparatus so as to shift management of. said 
contents data under control, of said management apparatus. 

231. The data management and movement method according to claim 230, 
wherein: 

said information creating Step creates license conditions 
information for prescribing the rights to utilize said contents data 
based on said handling policies and storing changeable identification 
information tor identifying a holder of. the contents data. 
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232. The data management and movement method according CO claim 231, 
wherein : 

said information creating step creates said license conditions 
information storing said identification information unique to said data 
storage apparatus. 

233. The data management and movement method according to claim 232, 
wherein : 

said receiving yfcep receives contents data encrypted by said 
content key, the content key and price information of said contents 
data sent: together with said handling policies frorc said recording 
apparatus; and 

said information creating step creates Accounting information 
for purchase of said contents data based on said handling, policies and 
paid price information and records it In a predetermined memory. 

234. The data management and movement method according to claim 233, 
therein: 

said information creating step records said accounting 
information in said memory that is tamper resistant:. 

235. The data management and movement method according to claim Z'M, 
comprising: 
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an encrypting step of encrypting said content Key by a temporary 
key shared with said management apparatus and also encrypting said 
accounting information by the temporary key; and wherein: 

said sending step sends to said management apparatus said content 
key encrypted tay said temporary key and said accounting information 
encrypted by said temporary key together with said contents data 
encrypted by said content key and said license conditions information. 

236. The data management arid movement method according to claim 235, 
comprising: 

an adding step of: adding signature data for verifying -whether 
or not la tape r 1 ng i :> p O r f o nned to said accounting in foruta t i on enc t. yp t; e d 
by said temporary key; and where Irs: 

said sending step sends to said management apparatus said 
accounting information encrypted by said temporary key with signature 
data added together with said consents data encrypted by said content 
key, said license conditions information and said content key encrypted 
by said temporary key. 

237. A program storage medium storing a predetermined program and 
supplying the program to a management apparatus, characterized in that 
said program cotrcp rises: 

a capturing step of reproducing and capturing predetermined 
contents data from a record medium of a predetermined removable da to 
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s to rage apparatus connected to said management apparatus to which 
various apparatuses will be connected; and 

a movement managing step of raanaging movement of said contents 
data to various apparatuses in place of said data storage apparatus. 

238. The program storage medium according to claim 237, wherein: 
said capturing step captures said contents data encrypted by a 

predetermined content key, the content key, and license conditions 
information prescribing the rights to utilise said contends data 
generated based on handling policies prescribing the conditions for 
using the content Key and storing identification information for 
identifying a holder of the contents data from said record medium of 
said data storage apparatus; and 

Said movement managing step updates said license conditions 
information by changing said identification information, and looves said 
contents data encrypted by said content key and the content key together 
with said updated license conditions information to said various 
apparatuses . 

239. The program storage medium according to claim 23?, wherein: 
said capturing s top of said program captures the license 

conditions information, said contents data encrypted by said content;? 
Key and the content key returned from said various apparatuses based 
on said license conditions information. 
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240. The program storage medium according to claim 238, wherein: 
said capturing Step of said program captures said 1 i cense 

conditions information storing said identification information unique 
to said data storage apparatus; and 

said movement managing step updates said license conditions 
Information by changing said identification information unique to said 
data storage apparatus in said license conditions information Co said 
identification information unique to said management apparatus. 

241. The program storage medium according to claim 240, wherein: 
said capturing step of said program captures accounting 

information for purchase of said contents data generated based on said 
handling policies and price information of said contents data from said 
data storage apparatus . 

Z 4 2 . The prog ram s forage medium accord! n g to c 1 a im 241, where! n said 
prog ran comprises a decrypting step of decrypting predetermined data 
encrypted by a temporary key shared between said Management apparatus 
and said data storage apparatus by the temporary key; and 

said capturing step captures a aid content key encrypted by said 
temporary key and said accounting information encrypted by the 
temporary key from said data storage apparatus; and 

said decrypting step decrypts by said temporary key said content 
key and said accounting information encrypted by said temporary key- 



respect i very. 
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243. The program stcraqe medium according to claim 242, wherein said 
program comprises a detecting step of verifying signature data added 
to predetermined data and detecting whether cr not said data is tampered; 
and 

said capturing step captures said accounting information to which 
signature data is added after being encrypted by said temporary key 
from said data storage apparatus; and 

said detecting step verifies said signature added to said 
accounting information encrypted by said temporary key. 

2<H. A prog r am storage medium storing a predetermined program and 
supplying the program to a data storage apparatus/ characterized in 
that $ a 1 d p rog r am compr i 3 es : 

a receiving step of receiving contents data encrypted by a 
predetermined content key, the content key, and handling policies 
prescribing the conditions for using the content key sent from a 
predetermined recording apparatus to said removable data storage 
apparatus; 

an information creating step of creating license conditions 
information prescribing the rights to utilize said contents data based, 
on said handling policies and storing identification information for 
identi tying a holder of the contents data under control, of said recording 
apparatus; 
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a recording step of recording on a predetermined record rtedium 
said license conditions information, said concents data encrypted by 
said content key, the contents key and said handling policies under 
control of said recording apparatus; 

a reproducing seep of, when said data storage apparatus is 
connected to a management apparatus tor managing movement of said 
contents data to various apparatuses, reproducing said contents data 
encrypted by said content key, the content key and said license 
conditions information fron: said record medium under control of the 
management apparatus; and 

a sending step of sending to said management apparatus said 
license conditions information tor managing said contents data together 
with said contents data encrypted by said content key and the content 
key from said data storage apparatus so as to shift management of said 
contents data under control of .said management apparatus. 

24 5. The program storage medium according to Claim 244, wherein: 

said information creating step of said program creates licen.se 
conditions information for prescribing the rights to utilize said 
contents do to based on said handling policies and storing changeable 
identification information for identifying a holder of the contents 
data. 



246. The program storage medium according to claim 24 5, wherein: 
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said information creatine step of said program creates said 
license renditions information storing said identification information 
unique to said data storage apparatus. 

247. The program storage medium according to claim 246, wherein: 
said receiving step of said program receives contents data 
encrypted by said content key, the content key and price information 
of said contents data seat together with said handling policies from 
said recording apparatus; and 

said information creating step creates accounting information 
Cor purchase of said contents data based on a a id handling policies and 
said price information and records it in a predetermined memory. 

2*10. The program storage medium according to e.uum ?A~? , wherein: 
said information creating step of said program records said 
accounting Information in said memory that is tamper resistant. 

249. The program storage medium according to claim 248, wherein said 
program comprises an encrypting step of encrypting said content fcey 
by a temporary key shared, with said management apparatus and also 
encrypting said accounting information by the temporary key; and 

said sending step sends to said management apparatus said content 
key encrypted by said temporary key and said accounting information 
encrypted by said temporary key together with said contents data 

encrypted by said content key and an. id ii-ccnac conditions information. ! 
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250. The proa ram storage medium according to claim 24 9, wherein said 
program comprises an adding step of adding signature data tor verifying 
whether or not tampering is performed to said accounting information 
encrypted by said temporary key; and 

said sending step sends to said management apparatus said 
accounting information encrypted by said temporary key with signature 
data added together with said contents data encrypted by said content 
key, said license conditions inforraation and said content key encrypted 
by said temporary key. 

251. An information provision system constructed of an information 
receiving apparatus and said regulating apparatus, wherein said 
.information receiving apparatus comprises: 

raeans on the receiving apparatus side for receiving predetermined 
contents data; 

means for adding a signature to utilization permission data 
showing said received contents data; 

means on the receiving apparatus side for sending said 
utilization permission data to which said signature is added; and 

said information regulating apparatus comprises: 

means on the. regulating apparatus side for receiving said 
utilization permission data io which said signature is added; 



Application/Control Number: 09/831,071 
Art Unit: *** 



Page 97 



means for determining, that is, verifying said signature added 
to said utilization permission data to determine whether or not the 
utilization permission data is illegal data; and 

means for notifying said information receiving apparatus, if 
determined as a result of verifying said signature Chat said utilization 
permission data is illegal data, of nonperiaission of utilization of 
said contents data and prohibiting said information receiving apparatus 
from utilising said contents data. 

252, The i nformation provision system according to claim 251, wherein: 
said means for determining of 5a id in format ion regulating 

apparatus verifies a signature on said utilisation permission data, 
and determines that said utilization permission data is illegal data 
if the utilization permission data is tampered to show contents data 
different from Maid contents data received by said Information 
receiving apparatus. 

253. The in formation provision system according to claim 252, wherein: 
said means for adding of said information receiving apparatus 

adds said signature to said utilization permission data prescribing 
Che rights to utilize said contents data; and 

said means for determining of said information regulating 
apparatus verif ies said signature on said utilisation permission data, 
ond determines that said utilisation permission data is illegal data. 
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if said utilization rights prescribed by the utili2ation permission 
data are tampered to prescribe other utilization rights. 

254. The information provision system according to claim 253, 
comprising an information sending apparatus Cor sending said contents 
data; and wherein: 

said information receiving apparatus and said information 
regis! a ting apparatus are connected online via said information sending 
apparatus . 

255. An information regulating apparatus connected online with a 
predetermined information receiving apparatus, comprising: 

means for receiving utilization permission data showing 
predetermined contents data and to which a signature is added sent f row 
said information receiving apparatus; 

means for determining, that is, verifying the signature on said 
utilization permission data to determine whether or not the utilUation 
permission data is illegal data; and 

means for notifying said information receiving apparatus, if 
determined that said utilization permission data is illegal data as 
a result of verifying said signature, of noripermission of utilization 
of said contents data and prohibiting .said information receiving 
apparatus from utilizing said concents data. 
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256. The information regulating apparatus according to claim 255, 
wherein : 

said means for determining verifies a signature on said 
utilization permission data, and determines that said utilization 
permission data is illegal data if the utilization permission data is 
tampered to show contents data different from said contents data 
received by said information receiving apparatus. 

257. The information regulating apparatus according to claim 256, 
wherein : 

said neans for receiving receives said utilization permission 
data prescribing Che rights to utilise said contents duta and to which 
said signature is added; and 

gaid means for determining verifies a signature on said 
utilization permission data, and determines that said utilization 
permission data is illegal data if said utilization rights are tampered 
to prescribe other utilization rights. 

258. The information regulating apparatus according to claim 2 55, 
wherein: 

said mean a for receiving receives accounting information 
generated during a purchasing process of said contents data and to which 
said signature is added as said utilization permission data; 
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said means for determining verifies the signature on said 
accounting information to determine whether or not said accounting 
information is illegal data; and 

said means Cor. notifying notifies said information receiving 
apparatus, if determined that said accounting information is illegal 
data since it is tampered as a result of verifying said signature, of 
suspension of, the purchasing process as nonperrnission of utilisation 
of said contents data and prohibits said information receiving 
apparatus from purchasing said contents data. 

259. The information regulating apparatus according to claim 25fi, 
comprising a means for decrypting predetermined encrypted data; arid 
wherein: 

said means for receiving receives said accounting information 
to which said signature is added after being encrypted by a temporary 
key shared between said information regulating apparatus and said 
information receiving apparatus; 

said means for determining verifies the signature on said 
accounting information lo determine whether or not said accounting 
information is illegal <jata; and 

sold means for decrypting decrypts said encrypted accounting 
information by said temporary key if it is determined chat said 
accounting information is Justifiable data as a result of verifying 
said signature. 
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260. An information receiving apparatus connected online to a 
predetermined in format ion regulating apparatus, comprising: 

means for receiving predetermined contents data that is sent: 
neans for adding to utilization permission data showing ^aid 
contents data a signature capable of de tec tiny whether or net said 
contents data shown by the utilization permission data is tampered to 
be other contents data; and 

means for sending said utilization permission data to which said 
signature is added to said information regulating apparatus which 
decides whether or not to prohibit utilisation of said contents data 
according to the result of verification of said signature. 

261. The information receiving apparatus according to claim 260, 
wherein: 

said means for adding adds said signature in order to allow 
detection cf whether or not said utilization permission data 
prescribing the rights to utilize said contents data is tampered to 
prescribe other utilization rights. 

262. The information receiving apparatus according to claim 260, 
comprising weans for processing purchase, that is, performing a 
purchasing process of said contents data arid generating accounting 
information for purchase of. said contents data; and wherein: 
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said means for adding adds said signature to said accounting 
information generated during a purchasing process of said concents data 
as said utilization permission data. 

263. The information receiving apparatus according to claim 262, 
comprising means for receiving a notice of whether or not utilisation 
of said contents data is prohibited from said information regulating 
apparatus; and wherein: 

said means for processing purchase suspends said purchasing 
process if notified of nonpermissl.on of utilization of said contents 
data from said information receiving apparatus during a purchasing 
process of said contents data. 

26-1. the information receiving apparatus according to claim 263, 
comprising means for encrypting said accounting information by a 
temporary key shared with said information regulating apparatus; and 
wherein: 

said means for adding adds said signature to said accounting 
information encrypted as above. 

265. The information receiving apparatus according to claim 200, 
comprising means for connecting online to said information regulating 
apparatus via a predetermined information sending apparatus sending 
3a id contents data. 
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266. An information provision method, comprising: 

a sending step of, by an information receiving apparatus, 
receiving predetermined contents data, adding a signature to 
utilization permission data shewing the received contents data and 
sending it; 

a utilization prohibiting step of, by an information regulating 
apparatus, verifying a signature on said utilization permission data 
to determine whether or tioc the utilization permission data is illegal 
data, and prohibiting the information receiving apparatus from 
utilizing said contents data if it determines that the data is illegal 
data. 

267 . The information provision method according to claim 266, wherein: 
said utilization prohibiting step verifies a signature on said 
utilization percussion data, and determines that said utilization 
permission data is illegal data if the utilization permission data is 
tampered to show contents data different from .said contents data 
received by said information receiving apparatus. 

268. The information provision method according to claim 26V, wherein: 
said sending step adds said signature to said utilization 

permission data prescribing the rights to utilize said contents data 

and sends it; and 

said utilization prohibiting step verifies a signature on said 



utilization permission data, and determines that said utilization 
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permission data is illegal data if: said utilization rights prescribed 
by ssid data is tampered to prescribe other utilization rights. 

269. The information provision method according to claim 263, wherein: 
said sending step sends said utilization permission data to said 

information regulating apparatus to which said .information receiving 
apparatus is connected online via an information sending apparatus 
sending said contents data. 

270. An information regulating method by an information regulating 
apparatus connected online with a predetermined information receiving 
a ppar a t u s , coiwp rising: 

a receiving step of receiving utilization permission data showing 
predetermined contents data and to which a signature is added sent from 
.said information receiving apparatus; 

a dec e rw i n i n g s t e p o f ve r i f y i ng t he s i g na t \i r e on sa i d u t i I xza t ion 
permission data to determine whether or not the utilization permission 
data Is .illegal data; and 

a notifying step of notifying said information receiving 
apparatus, if it determines that said utilization permission data is 
illegal data as a result of verifying said signature, of nonpermissior.. 
of utilization of said contents data and prohibiting said information 
receiving apparatus ' Iron utilising said contents data. 
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said determining step verities the signature on said accounting 
information to determine whether or not said accounting information 
is illegal data; and 

said notifying step notifies said information receiving 
apparatus, if it determines that se»iu accounting information is illegal 
data since it is- tampered as a result of verifying said signature, of 
suspension of the purchasing process as nonpermission of utilization 
of said contents data and prohibits said information receiving 
apparatus from purchasing said contents data. 

274. The in format ion regulating method according to claim 2*7 3, 
comprising a decrypting step of decrypting predetermined encrypted 
data; and wherein; 

said receiving step receives accounting information to which said 
Signature is added after being encrypted by a temporary kf>y shared 
between said information regulating apparatus and said information 
receiving apparatus; 

said determining step verifies the signature on said accounting 
information to determine whether or not said accounting information 
is illegal data; and 

said decrypting step decrypts said encrypted accounting 
information by said temporary key if it is determined that said 
accounting information is jus tillable data 05- a result of verifying 
said signature » 
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271. The information regulating method according to claim 2^0, 
wherein : 

said means for determining verifies a signature on said 
utilization permission data, and determines that said utilization 
permission data is illegal data if the utilization permission data is 
tampered to show contents data different from said contents data 
received by said information receiving apparatus. 

272. The information regulating method according CO claim 271, 
wherein : 

said receiving step receives said utilization permission data 
prescribing the rights to utilise said contents data and to which said 
signature is added; and 

said determining' step verifies a signature on said utilization 
permission data, and determines that said utilization permission data 
is illegal data if said utilization rights arc tampered to prescribe 
other utilization rights. 

273. The information regulating method according to claim 270, 
whe rein : 

said receiving step receives accounting information generated 
during a purchasing process of said contents data and to which said 
signature is added as said utilization permission data; 
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said determining step verif ies the signature on said accounting 
information to determine whether or not sale accounting information 
is illegal data; and 

said notifying step notifies said information receiving 
apparatus, i\\ i t determines that said accounting information is illegal 
data since it is tampered an a result of verifying said signature, of 
suspension of the purchasing process as nonperaission of utilization 
of said contents data and prohibits said information receiving 
apparatus front purchasing said contents datn. 

274. The information regulating method according to claim 273, 
comprising a decrypting step of decrypting predetermined, encrypt etf 
data; and wherein: 

said receiving step receives accounting .Information to which said 
signature i« added after being encrypted by a temporary key shared 
between, said information regulating apparatus and sale information 
receiving apparatus; 

said, determining step verities the signature on said accounting 
information to determine whether or not said accounting information 
is illegal data; and 

said decrypting step decrypts said encrypted accounting 
information by said temporary key if it is determined that said 
accounting information is justifiable data ay a result of verifying 
said signature. 
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275. A data utilization method for utilizing predeter mined contents 
data by an information receiving apparatus connected online to a 
predetermined information regulating apparatus, comprising: 

a receiving step of receiving predetermined contents data that 
is sent; 

an adding step of adding to utilization permission data showing 
said contents data a signature capable of detecting whether or not said 
contents data shown by the utilization permission data is tampered to 
be other contents data; and 

a sending step of sending said utilization permission data to 
which said signature is added to said information regulating apparatus 
which decides whether or not to prohibit utilization of said contents 
data according to the result or verification of said signature. 

276. An data utilization method according to claim 275, wherein: 
said adding step adds said signature in order to allow detection 

of whether or not said utilization permission data prescribing the 
rights to utilize Raid contents data is tampered to prescribe other 
utilization rights. 

277. the data utilization method according to claim 275, co*"cpri$ing 
a purchase processing f3tep of performing a purchasing process of said 
contents data and generating account iixq information for purchase or. 
said contents data; and wherein: 
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said adding step adds said signature to said Accounting 
information generated dicing a purchasing process of said contents data 
as said utilization permission data, 

276. The data utilisation method according to claim 277, comprising 
5 receiving stop of receiving a notice of whether or not utilisation 
of sold contents data is prohibited from said information regulating 
apparatus; and wherein: 

said purchase processing step suspends said purchasing process 
if notified of nonpe.rm.iss ion of utilization of said contents data from 
so id information receiving apparatus during a purchasing process of 
said contents data. 

279. The da*: a utilization mot hod according to claim 27 a, comprising 
an encrypting step of encrypting said accounting information by a 
temporary key shared with said information regulating apparatus; and 
wherein : 

said means for adding adds said signature to said accounting 
information encrypted as above. 

280, The data utilisation method according to claim 275, comprising 
a connecting step of being connected online to said information 
regulating apparatus via a predetermined information sending apparatus 
sending said contents data. 
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281. A program storage medium storing a predetermined program and 
supplying the program to an information regulating apparatus, 
characterised in that said program comprises: 

a receiving step of receiving utilization permission data showing 
predetermined contents data and to which a signature is added sent from 
said information receiving apparatus connected online; 

a determining step of verifying the signature on said utilization 
permission data to determine whether or not the utilization permission 
data is illegal data; and 

a notifying step of notifying said information receiving 
apparatus, if it determines that said utilization permission data is 
illegal data as a result cf verifying said signature, of non-permission 
of utilisation of said contents data and prohibiting said information 
receiving apparatus from utilizing said contents data. 

The program storage* medium according tc claim 281, wherein: 
said determining stop of said program verifies a signature on 
said utilization permission data, and determines that said utilization 
permission data is illegal data if the utilization permission data is 
tampered to show contents data different from said contents data 
received by said information receiving apparatus. 



283. The program storage medium according to claim 292/ wherein: 
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said receiving step of said program receives sold utilization 
permission data prescribing the rights to utilize said contents data 
and to which said signature is added; and 

said determining step verifies a signature on said utilization 
permission data, and determines that said utilization permission data 
is illegal data it: said utilisation rights are tampered to prescribe 
other utilization rights. 

254. The program storage medium according to claim 281, wherein: 

said receiving step of said program receives accounting 
information generated during a purchasing process of s*id contents data 
and to which said signature is added as said utilization permission 
data; 

said determining step verifies the signature on said accounting 
information to determine whether or not said accounting information 
is illegal data; and 

said notifying step notifies said information receiving 
apparatus, if it determines that said accounting information is illegal 
data since it is tampered as a result of verifying said signature, of 
suspension of the purchasing process as nonpennisslon of utilization 
of 3aid contents data and prohibits said information receiving 
apparatus from purchasing said contents data. 
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285." The program storage medium according to claim 284, wherein said 
program comprises a decrypting step of decrypting predetermined 
encrypted data; and wherein: 

sai d receiving step receives said accounting information to which 
said signature is added after being encrypted by a temporary key shared 
between said information regulating apparatus and said information 

receiving apparatus; 

said determining step verifies the signature on said accounting 
information to determine whether or not said accounting information 
is illegal data; and 

said decrypting step decrypts said encrypted accounting 
information by said temporary key if it is determined that said 
accounting information is justifiable data as a result ot verifying 
said signature. 

236. A program storage medium for storing a predetermined program and 
supplying the program to an information receiving apparatus, 
characterized in that said program comprises: 

a receiving step of receiving predetermined contents data by an 
information receiving apparatus connected online to a predetermined 
information regulating apparatus; 

an adding step of adding to utilization permission data showing 
said contents data a signature capable of detecting whether or not said 
content* data shown by the utilization permission data is tampered to 



be other contents data; and 
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a seeding step cf sending said utilization permission data to 
which said signature is added to said information regulating apparatus 
which decides whether or not to prohibit; utilization of said concents 
data according to the result of verification of said signature. 

287. The program storage medium according to claim 285, wherein: 
said adding step Of said program adds said signature in ore* at 

to allow detection of whether or not s^id utilization permission data 
prescribing the rights to utilize said concents data is tampered to 
prescribe other utilization rights. 

288. -The program storage medium according to claim 286, wherein said 
program comprises a purchase processing step of performing a purchasing 
process of; said content.-* data and generating accounting information 
for purchase of said contents data; and 

said adding step adds said signature to said accounting 
information generated during a purchasing process of said contents data 
as said utilization permission data. 

209. The program storage medium according to claim 288, wherein said 
program comprises a receiving step of receiving a notice of whether 
or not utilization of said contents data is prohibited from said 
information regulating apparatus; and 

said purchase processing step suspends said purchasing process 



if notified at nenperroisslon at utilisation of said contents data f.r< 
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said information receiving apparatus during a purchasing process of 
.said concents data . 

290. The program storage medium according to claim 289, wherein said 
program comprises an encrypting step of encrypting said accounting 
information by a temporary key shared with .said information regulating 

apparatus; and 

said adding step adds said signature to said accounting 
information encrypted as above. 

291. The program storage medium according to claim 286, wherein said 
program comprises a connecting step of being connected online to said 
information regulating apparatus via a predetermined information 
sending apparatus sending said contents data. 

292. An information, provision system supplying predetermined contents 
data sent from an information sending apparatus to an information 

.provision apparatus, wherein said information sending apparatus 
comprises: 

means for encrypting sa.id contents data by a predetermined 
content key; 

means for sending said content key and sa.ld contents data 
encrypted by the content key; and 

said information provision apparatus comprises: 
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means for receiving said content key and said contents daca 
encrypted by the content key sent from said information sending 
apparatus; 

means for decrypting by said content key said contents dans 
encrypted by the content key; 

means for inserting a digital waternark, that is, inserting by 
a digital watermark predetermined information into the contents data 
decrypted by said content hey; ^nd 

means for recording the contents data with said information 
inserted on a removable record medium. 

293. The information provision system according to claim 232, wharein 
said means for inserting a digital watermark of said information 
provision apparatus inserts said information for limiting duplication, 
into said contents data by said digital watermark. 

294. The information provision system according to claim 292, wherein 
said information sending apparatus comprises means for generating 
handling policies prescribing conditions for using said contents key; 
and 

said means for sending sends said handling policies together with 
said content key and said contents data encrypted by the content key; 
and 

said information provision apparatus comprises: 
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means for creating license conditions information prescribing 
conditions for using said contents data based on said handling policies; 
and 

means for storing, that is, sending said license conditions 
information together with said content key and said contents data 
encrypted by the content key to a predetermined removable data storage 
apparatus and storing them thereon. 

295. The information provision system according to claim 294, wherein 
said means for storing of said information provision apparatus sends 
said handling policies together with said content, key and said contents 
data encrypted toy the content key to said data storage apparatus and 
stores them thereon, end creates said license conditions information 
by said data storage apparatus based on said handling policies and stores 
them thereon. 

296. The information provision system according to claim 295, 
comprising a management apparatus for managing sending of said contents 
data from said information sending apparatus to said information 
provision apparatus; and wherein: 

said means for storing of said information provision apparatus 
sends identification information for identifying said data storage 
apparatus to said management apparatus; and 

said management apparatus manages said data storage apparatus 



s toting said contents data based on go id identification information. 
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297. An information provision apparatus supplying predetermined 
contents data sent from an information sending apparatus, comprising: 

means for receiving said contents data encrypted by a 
predetermined content key and the content key sent f rom said information 
sending apparatus; 

raeans for decrypting by said content key the contents data 
encrypted fay the content key; 

means for inserting a digital watermark, that is, inserting by 
a digital watermark predetermined information into said contents data 
decrypted by said content key; and 

means tor recording said contents data with said information 
inserted on a removable rewwi medium. 

298. The information provision apparatus according to claim 297, 
wherein said means for inserting a digital watermark inserts said 
information for limiting duplication into said contents data by said 
digital watermark, 

299. The information provision apparatus according to claim 297, 
comprising: 

means for creating license conditions information prescribing 
conditions for using said contents data baaed or, the handling policies 
prescribing conditions for using said content key sent from said 
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information sending apparatus together with said content key and sale 
contents data encrypted by the content key; and 

rceans for scoring, that is, sending said license conditions 
information together with said content key and said contents data 
encrypted by the content key to a predetermined removable data storage 
apparatus and storing them thereon. 

300. The information provision apparatus according to claim 29 9 4 
wherein said means for storing sends to said data storage apparatus 
said content key and said concents data encrypted by Che content key 
and said handling policies and stores there thereon, and creates seic 
license conditions iti format ion by said data storage apparatus 33 sec 
on said handling policies and stores them thereon* 

301. An information provision apparatus providing predetermined 
contents data sent from an information sending apparatus, comprising: 

means for creating license conditions information prescribing 
conditions for using said contents data based on the handling poXici^i; 
prescribing conditions for using naid content key sent from said 
information sending apparatus together with said content key and said 
contents data encrypted by said content key; and 

means for storing, that is, sending said license condition a 
information together with said content key and said contents da La 
encrypted by said content key to said predetermined removable date- 
Storage apparatus and storing them thereon. 



Application/Control Number: 09/831 ,071 Page 119 

Art Unit: *** 

302. The inforicotion provision apparatus according to claim 301, 
wherein said means for storing sends co said data storage apparatus 
said content key, said contents data encrypted by the content key and 
said handl ing policies and stores them thereon, and creates said license 
conditions information by said data storage apparatus based on said 
handling policies and stores them thereon. 

303. A removable data storage apparatus for storing predetermined 
contents data sent from an information .provision apparatus, comprising ; 

a predetermined record medium; 

means for receiving said content key, said contents data 
encrypted by the content !;ey and license conditions information 
prescribing the conditions for using said contents data created as 
required based on the handling policies prescribing conditions for 
vising said content key sent from said in formation provision apparatus; 
and 

means tor recording on said record, medium said content key, said 
contents data encrypted by the content key and said license condi tions 
information . 

304. The data storage apparatus according to claim 303, comprising 
.means for creating said license conditions information based on said 
handling policies sent from said information provision apparatus; 
where in; 
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said means for recording records on said record mediura said 
content key, said contents data encrypted by the content key and said 
license conditions information created by said means for creating said 
license conditions information when said content key, said contents 
data encrypted by the content key and said handling policies are sent 
from said information provision apparatus. 

305. An information provision method for providing predetermined 
contents data sent from an information sending apparatus to an 
information provision apparatus, comprising: 

a dnta sending step of sending a predetermined content key and 
said concents data encrypted by the content key by said information 
sending apparatus; and 

a receiving step of receiving said content key and sale contents 
data encrypted by the content key by said information provision 
apparatus ; 

a decrypting step of decrypting by said content key the contents 
data encrypted by said content key by said information provision 
apparatus; 

a digital watermark inserting step of inserting by a digital 
watermark predetermined information into said contents data decrypted 
by said content Jc«y by said information provision apparatus; and 

a data recording step of recording on a removable record medium, 
aaid contents data with said information inserted by said information 



p.r o vi s i o n apparatus. 
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30 f>. The information provision method according to claim 3CS, wherein 
said digital watermark inserting step inserts said infermat ion for 
limiting duplication into said contents data by said digital watermark. 

307. The information provision method according to claim 305, 
comprising: 

a handling policies generating step of generating handling 
policies proscribing conditions for using said contents key to be sent 
to said information provision apparatus by said information sending 
apparatus; 

a license conditions information creating step of creating 
license conditions information prescribing conditions for using said 
contents data based on said, handiinc policies by said information 
provision apparatus; and 

a scoring step o£ sending said License conditions information 
together with said content key and said contents daza encrypted by the 
content key to a predetermined removable data storage apparatus and 
storing them thereon by said information provision apparatus. 

308. the information provision method according to claim 307, wherein 
said storing step sends said handling policies together with said 
content key and said contents data encrypted by the content key to said 
data storage apparatus and stores thorn thereon, and creates said license 
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conditions information by said data storage apparatus based on said 
handling policies and stores them thereon. 

309. The information provision method according to claim 308, 
comprising : 

an identification information sending step of sending 
identification information for identif ying said data storage apparatus 
to a management apparatus managing sending of said contents data from 
said information sending apparatus to said information provision 
apparatus by said information provision apparatus; and 

a managing step of managing said data storage apparatus storing 
said contents data based on said identification Information by said 
management apparatus. 

310. An information provision method for providing predetermined 
contents data by an information provision apparatus, comprising: 

a receiving step of receiving said contents data encrypted by 
a predetermined content key and the content key sent from an in format: Ion 
sending apparatus; 

a decrypting step of decrypting by said content key said contents 
data encrypted by the content key; 

a digital watermark inserting step of inserting by a digital 
watermark predetermined information into said contents data decrypted 
by said content key; and 
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a data recording step of recording said contents data with said 
information inserted on a removable record aediuci. 

311. The information provision method according to claim 3.10, wherein 
said digital watermark inserting step inserts said information for 
Uniting duplication into said contents data by said digital watermark. 

312. The information provision method according to cla.ini 310, 
comprising : 

a license conditions information creating step of creating 
license conditions information prescribing conditions for using said 
contents data based on handling policies prescribing conditions for 
using said content key sent from said information sending apparatus 
together with said content key and said contents data encrypted by the 
content key; and 

a storing step of sending said license conditions information 
together with said content key and said contents data encrypted by the 
content key to a predetermined removable, data storage apparatus and 
Storing them thereon. 

31.3. The information provision method according to claim 312, wherein 
said storing step sends to said data storage apparatus said content 
X-ey, said contents data encrypted by the content key and said handling 
policies and stores i;h«i:i thereon, and creates said UoeniiH conditions 
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Information by said data storage apparatus based on said handling 
policies and stores them thereon. 

314. An information provision method for providing predetermined 
contents data by an information provision apparatus, comprising: 

a license conditions information creating step of creating 
license conditions information prescribing conditions for using said 
contents data based on handling policies prescribing conditions for 
using said content key sent from said information sending apparatus 
together with said content key and said concents data encrypted hy the 
content key; and 

a storing step of sending said license conditions information 
together with said content key and said contents data encrypted by the 
content key to a predetermined removable data storage apparatus and 
scoring tnem thereon. 

3.15. The information provision method according to claim 314, -/.'herein 
said storing -step sends to said data storage apparatus said content 
key, said contents data encrypted by Che content key and said handling 
policies and stores them thereon, and creates said license conditions 
information by said data storage apparatus based on said handling 
policies and storey them thereon. 
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316. A data .-store method fox storing predetermined contents data sent 
from an information provision apparatus on a removable data storage 
apparatus, comprising: 

a receiving step of receiving said content key, said contents 
data encrypted by the content key and license conditions information 
prescribing conditions for using sale contents data created as required 
based on handling policies prescribing conditions for vising said 
content key sent from said information provision apparatus; and 

a recording step of recording said content key, said contents 
data encrypted by the content Key and said license conditions 
information on a record medium. 

317 . The data store method according to claim 316, comprising a license 
conditions information creating step of creating said license 
conditions information based on said handling policies sent from said 
information provision apparatus; wherein: 

said recording step records on 3a id record medium said content 
key, said contents data encrypted by the content key and said license 
conditions information created by said means for creating said license 
conditions information when only said content key, said contents data 
encrypted by the content key and said handling policies are sent f roas 
$aid information provision apparatus. 
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316. A proqrara storage medium for storing a predeterminer: program and 
supplying the program to an information provision apparatus, wherein 
said program comprises: 

a receiving step of receiving said contents data encrypted by 
a predetermined concent key and the; content key sent from said 
in format ion sending apparatus; 

a decrypting step of decrypting by aaid content key .said contents 
data encrypted by the content key; 

a digital watermark inserting step of inserting by a digital 
watermark predetermined information into said contents data decrypted 
by said content key; and 

a data recording step of recording said contents data with said 
information inserted on a removable record medium. 

319. The program storage medium according to claim 318, wherein said 
digital watermark inserting step of said program inserts said 
information for limiting duplication into said contents data by said 
digital watermark. 

320, The program storage medium according to claim 318, wherein said 
program comprises: 

a license conditions information creating step of creating 
license conditions information prescribing conditions for. using said 
contents data based on said handling policies prescribing conditions 



for using said content key sent from said information sending apparatus 
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together with said content key and said contents data encrypted by the 
content V.ey; and 

a storing step of sending said license conditions information, 
together with said content Hey and said content.'; data encrypted by the 
content key to a predetermined removable data storage apparatus and 
storing them thereon. 

321. The program storage medium according to claim 320, wherein said 
Storing step of said program sends to said data storage apparatus said 
content >;ey, said contents data encrypted by the content key and said 
handling policies and storey thorn thereon, and creates said license 
conditions information by said data storage apparatus based on said 
handling policies and stores them thereon. 

322. A program storage mediant for storing a predetermined program and 
supplying the program to an information provision apparatus, wherein 
said program comprises; 

a license conditions information creating step of creating 
license conditions information prescribing conditions for using said 
contents data hased on handling policies prescribing conditions for 
using said content: key sent from said information sending apparatus 
together with said content key and said contents data encrypted by the 
content key; and 

a storing step of sending said license conditions information 
together with said content hey and said contents data encrypted by the 
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content key to a predetermined removable data storage apparatus and 
storing them thereon. 

323. The program storage medium according to claim 322, wherein said 
storing step of said program sends to said data storage apparatus said 
content key, said contents data encrypted by Che content key and said 
handling policies and stores them thereon, and creates said license 
conditions information by said data storage apparatus based on said 
handling policies and scores them thereon. 

324. A program storage medium for storing a predetermined program and 
supplying the program to a data storage apparatus, wherein said program 
compri r>*2S : 

a receiving step of receiving said content key, said contents 
data encrypted by the content key and license conditions information 
prescribing conditions for using aaid contents data created as required 
based on handling policies prescribing conditions for using said 
content key sent from said information provision apparatus to said 
removable data storage apparatus; 

a recording step of recording said concent key, said contents 
data encrypted by the content key and said license conditions 
information on a record medium. 

325. The program storage medium according to claim 324, wherein said 



p r o g r am c omp rises: 
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a license conditions information creating step of creating said 
license conditions information based on said handling policies sent 
from said information provision apparatus; wherein; 

said recording step records on said record medium said content 
key, said contents data encrypted by the content key and said license 
conditions information created by said license conditions information 
creating step when only said content key, said contents data encrypted 
by the content key and said handling policies are sent from said 
information provision apparatus. 

326. An information recording apparatus Cor storing predetermined 
contents data on a predetermined data storage apparatus, comprising: 

a contents server holding a plurality oC said contents data; 

means for selecting, that is, managing each of said contents data 
held on said contents server by categorization, and ii said category 
and the number of contents that are desired are specified, arbitrarily 
selecting a plurality of said contents data equivalent to said specified 
number of contents of said contents data belonging to said specified 
category; and 

means for storing, chat is, reading each of said selected contents 
data from said contents server and storing it on said data storage 
apparatus . 

327. The information recording apparatus according to claim 326, 
comprising means for generating a random uujuber based on said specified 
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nuiaber of contents; and wherein said means for selecting selects each 
of said contents data by using said random number. 

328. The Information recording apparatus according to claim 327, 
comprising means tor creating license conditions information 
prescribing the rights to utilize each of said contents data fleeted 
by said means for selecting; and wherein: 

said means for storing stores said license conditions information 
together with each of said contents data on said data storage apparatus . 

329. The information recording apparatus according to claim 326, 
wherein said ineans for creating license conditions information creates 
said license conditions information prescribing said utilization 
rights so as to ii-nit the number of times of reproduction of each of 
said contents data. 

330. The information recording apparatus according to claim 323, 
wherein said means for creating license conditions information creates 
said license conditions information prescribing said utilization 
rights so as to limit the period of reproduction or each of said contents 
data^ 

331. The in formation recording apparatus according to claim 323, 
wherein :;aid means for creating license conditions information creates 
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said license conditions information so as tc score predetermined 
identification information; nnd 

said means for storing detects said contents data to be deleted 
based on said identification information stored in said license 
conditions information and stores said concents data that is new so 
as to overwrite said detected contents data. 

332. A data storage apparatus for storing predetermined contents data 
by an information recording apparatus, comprising: 

a predetermined record medium; 

me tins for receiving a plurality o£ said contents data belonging 
to said desired category and equivalent to said desired number of 
contents, of a plurality of said categorized contents data sent frors 
said information recording apparatus; 

means for recording each of said contents data collectively on 
said record medium, 

333. The data storage apparatus according to claim 332, wherein said 
means for recording records on said record medium each of said contents 
data and said license conditions information prescribing the rights 
to utilize each of said contents data by sending said license conditions 
information together with each of said contents data from said 

i n forma t ion reco rd i ng a ppa r a t u 3 . 

334. The data storage apparatus according to claim 333, wherein said 
means for recording records on said record medium said license 
conditions information prescribing said utilization rights so as to 
limit the number of times of reproduction of said contents data together- 
wit h said contents data. 

335. The data sic rage apparatus according to claim 333, wherein said 
means for recording records on said record medium said license 
conditions information prescribing said utilization rights so as to 
limit the period off reproduction of said contents data together with 
said contents data. 

336. (Amended) A data store- method for storing predetermined contents 4ata on a data 
storage apparatus by an information recording apparatus, comprising: 
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a selecting step of managing a plurality of said contents data held on a contents server in 
advance by categorization, and if said category and the number of contents thai are desired arc 
specified, arbitrarily selecting a plurality of said concents data equivalent to said specified 
number of contents, of said contents data belonging to said specified category*, and 

a storing step of reading each of said selected contents data from said contents server and 
storing it on said data storage apparatus. 



337. The data store method according to claim 336, comprising a random 
number generating step of generating a random number based on said 
specified number of contents; and wherein: 

said selecting step selects each of said contents data by using 
said random number. 

338 . The data store method according to claim 337, comprising a license 
conditions information creating step of creating license conditions 
information prescribing the rights to utilize each of said contents 
data selected by said step of selecting; and 

said storing ;*tt*p store? said license condition?, information 
together with each of said contents data on said data storage apparatus. 

339 . The data store method according to claim 338, wherein said 1 i cense 
conditions information creating step creates said license conditions 
information prescribing said utilization rights so as to limit the 
number of times of reproduction of each of said contents data. 

34 0. The data store method according to claim 338, wherein so id l icense 
conditions .information creating step creates said license conditions 
information prescribing said utilization rights so as to limit the 
period of reproduction of each of said contents data. 



341 . The data store method according to ciaito 338, wherein said license 
conditions information creating step creates said license conditions 
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information so as to score predetermined identification information; 
and 

said scoring step detects said contents data to be deleted based 
on said identification information stored in said license conditions 
information and stores said contents data that is new so as to overwrite 
said detected contents data. 

342. A data store method for storing predetermined contents data on 
a data storage apparatus by an information recording apparatus, 
comprising: 

a contents receiving step of receiving a plurality of said 
contents data belonging to said desired category and equivalent to said 
desired number of contents, of a plurality of said categorized contents 
data sent from Sold information recording apparatus to sold data storage 
apparatus; and 

a recording step of recording each of said contents data 
collectively on a record medium in said data storage apparatus. 

34 3. The data store method according to claim 342/ wherein said 
recording step records on said record medium each of said contents data 
and said license conditions information prescribing the rights to 
utilize each of said contents data by sending said license conditions 
information together with each of said contents data from said 
information recording apparatus. 

.144. The data store method according to claim 3*53, wherein said 
recording step records on said record medium said license conditions 
information prescribing said utilization rights so as to limit the 
number of times of reproduction of each of said contents data together 
with each of said, contents data. 

345. The data store method according to claim 343/ wherein said 
recording step records cn said record medium said license conditions 
information prescribing said utilization rights so as to limit the 
period of reproduction of: each of said contents data together with each 
of said contents data. 
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346. (Amended) A program storage medium tor storing a predetermined program 
and supplying the program to an information recording apparatus, wherein said program 
comprises: 

a selecting step of managing a plurality of fsaid] contents data [Server] held on a contents 
server in advance by categorization, and it' said category and the number of contents that arc 
desired are specified, arbitrarily selecting a plurality of said contents data equivalent to said 
specified number of contents, of a plurality of said contents data belonging to said specified 
category; and 

a storing step of reading each of said selected contents data from said contents server and 
storing it on said data storage apparatus. 

347. The program storage medium according to claim 346, wherein said 
program comprises a random number generating step of generating a random 
number based on said specified number of contents; and 

said selecting step selects each of said contents data by using 
said random number. 

348. The program storage medium according to claim 341, wherein said 
program comprises a license conditions information creating step of 
creating license conditions information prescribing the rights to 
utilize each of said contents data selected by said step of selecting; 
and 

said storing :;tep stores said license conditions information 
together with each of said contents data on said data storage apparatus. 

349. The program storage medium according to claim 346, wherein said 
license conditions information creating step of said program creates 
said license conditions information prescribing said utilization 
rights so as to limit the number of times of reproduction of each of 
said con ten 1*3 data. 

350. The program storage medium according to claim 34©, wherein said 
license conditions information creating step of said program creates 
said license conditions in formation prescribing said utilization 
riohts so as to limit the period of reproduction of each nf said contents 
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351. The program storage mediant according to claim wherein said 
license conditions information creating step of said program creates 
said license conditions information so as to store predetermined 
identification information; and 

said storing step detects said contents data to be deleted based 
on said identification information stored in said license* conditions 
information and stores said contents data that is new so as to overwrite 
said detected contents data. 

352. A program storage medium for storing a predetermined program and 
supplying the program to a data storage apparatus, wherein said program 
comprises : 

a contents receiving step of receiving a plurality of said 
contents data belonging to said desired category and equivalent to a 
desired number of contents, of a plurality of said categorized contents 
data sent from an .information recording apparatus; and 

a recording step of recording each of said contents data 
collectively on a record medium. 

353. The program storage medium according to claia 352, wherein said 
recording step of said program records on said record medium each of 
said contents data and said license conditions information prescribing 
the rights to utilize each of said contents data by sending said License 
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conditions information together with each of said contents data from 
said information recording apparatus. 

354. The program storage medium according to claim 353, wherein said 
recording step of said program records oa said record medium said license 
conditions information prescribing said UtUJ nation rights so as to 
limit the number Of times of reproduction or each of .said contents data 
together with each of said contents data. 

355. The program storage medium according to claim 353, wherein said 
recording sr.cp of said program records on said record medium said license 
conditions information prescribing said utilisation eights so as to 
limit the period of reproduction of each of said contents data together 
with each of said contents data. 

356. An information provision system constructed of an information 
sending apparatus* an information receiving apparatus and a list 
sending apparatus, wherein: 

said information sending apparatus comprises: 
means for sending predetermined contents data; and 
said list sending apparatus comprises; 

means for creating a provision prohibition list showing said 
contents data designated as provision-prohibited; and 
means for sending said prohibition list; and 

said information receiving apparatus comprises: 
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means for receiving said contents data and said provision 
prohibition list; 

means for determining whether or not said contents data sent from 
said information sending apparatus is provision-prohibited based on 
said provision prohibition list; find 

means for stopping capture of the contents data in the case where 
said contents data is provision-prohibited according to results of 
determination acquired from said means for determining. 

351. The i n f. o ma t i on pr o vi s i on s y s tern a cccr di ruj to c 1 a im 3 3 G , wh er e i n 
said list sending apparatus comprises a means cor roistering said 
information sending apparatus designated as utilization-prohibited on 
said provision prohibition list; 

said means for determining of said info mat ion receiving 
apparatus determines whether or not said contents data sent from said 
information sending apparatus is provision-prohibited as above and also 
determines whether or not said information sending apparatus is 
utilization-prohibited as above based on said provision prohibition 
list; and 

said means for stopping capture stops capture of said contents 
data in the case where said contents data is provision -prohibited as 
above and in the case where said information sending apparatus is 
u t i. Li zat ion-prohibited as above according to results of determination 
acquired from said means for determining respectively. 
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358. The information provision system according to claim 357, wherein: 
said information receiving apparatus comprises: 
one or more online apparatuses connected online to said list 

sending apparatus and receiving said provision prohibition list; and 
one or more offline apparatuses not connected online to said "list 

sending apparatus; and 

said online apparatus comprises: 

means for an online apparatus for sending a list, that is, sending 
said provision prohibition list* to said offline apparatus on connecting 
the offline apparatus; 

means for an online apparatus for receiving, that is, direccly 
receiving said contents data sent from said information sending 
apparatus , or receiving said contents data sent from said information 
sending apparatus via other online apparatus and offline apparatus; 
and 

means for an online apparatus for stopping capture of said 
contents data as required based on said provision prohibition list; 
and 

said offline apparatus comprises: 

means for an of t line apparatus for sending a .list, that is, sending 
said provision prohibition list to said offline apparatus as required 
on connecting the offline apparatus; 

means for an offline apparatus for: receiving, that is, receiving 
said provision prohibition list sent from said online apparatus, and 

also directly receiving !>a.id contents data sent from yyid information 
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sending apparatus, or receiving said contents data s«nt from said 
information sending apparatus via other online apparatus and offline 
apparatus; and 

means for an offline apparatus for stopping capture of said 
contents data as required based on said provision prohibition .list. 

359. The information provision system according to claim 358, wherein: 
sale online apparatus comprises means for an online apparatus 
for, if said means for an online apparatus foe receiving receives said 
contents data sent from said offline apparatus, determining whether 
or not said contents data is provision-prohibited as above and also 
determining whether or not said information sending apparatus that is 
the source o£ the contents data is utilisation-prohibited as above based 
on said provision prohibition list; 

said means tot an online apparatus for stopping capture stops 
capture of said contents data in the case where said contents data is 
provision-prohibited as above and in the case where said information 
sending apparatus is utilization-prohibited as above according to 
results of determination acquired from said means for an online 
apparatus for determining; and 

said weans for an online apparatus for sending a list sends said 
provision prohibition list to said offline apparatus in the case where 
said contents data is provision-prohibited as above and in the case 
where said information sending apparatus is utilization -prohibited as 



above . 
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360, The information provision system according to claim 359, wherein: 
said offline apparatus comprises means for an offline apparatus 

for, if means for an offline apparatus for receiving receives said 
contents data sent from another offline apparatus, determining whether 
or not said contents data is provision-prohibited as above and also 
determining whether or not said information sending apparatus that is 
the source of the contents data is utilization-prohibited as above based 
on said provision prohibition iist; 

means for an of fline apparatus for stopping capture stops capture 
of said concents data in the case where said contents data is 
provision-prohibited as above and in the case where said information 
sending apparatus is utilization-prohibited as above according to 
results of determination acquired from said means for an offline 
apparatus for determining; and 

said means for an offline apparatus for sending a list sends said 
provision prohibition list to another offline apparatus as above in 
the case where said contents data is provision-prohibited as above and 
in the case where said information sending apparatus is 
utilization-prohibited as above. 

361. A list sending apparatus for sending a predetermined list to an 
information receiving apparatus receiving predetermined contents data 
fiftnt from an info emotion sonding apparatus, co^prisin^ : 
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means for creating a provision prohibition List showing said 
contents data designated as provision-prohibited; ond 

means for sending said provision prohibition list to said 
information receiving apparatus. 

362. The list sending apparatus according to claim 361, wherein said 
means for creating a list registers said information sending apparatus 
designated as utilisation -prohibited on said prevision prohibition 
list. 

363. The list sending apparatus according to claim 362, wherein: 
said means for creating a list updates said provision prohibition 

list every time said contents data is designated as provision- 
prohibited as above or every time said information sending apparatus 
is design cited as utili sation-proh.ibi ted as above; and 

said means for sending sends said provision prohibition list to 
said information receiving apparatus every time it is updated, 

364. An information receiving apparatus for receiving predetermined 
contents data sent from an information sending apparatus and a 
predetermined list sent from a list sending apparatus, comprising: 

ffiftans ror receiving a provision pi ut libit ion list showing sold 
contents data designated as provision-prohibited sent from s«iid Hat 
sending apparatus; 

means for holding said provision prohibition list; 
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means for determining whether or not said contents data sent from 
said information sending apparatus is provision-prohibited based on 
said provision prohibition list; and 

means for stopping capture of said contents data in the case where 
the contents data is provision-prohibited as above according to results 
of determination acquired from said means for determining. 

365. The information receiving apparatus according to claim 364, 
wherein: 

said means for holding a list holds said provision prohibition 
list showing said information sending apparatus designated as 
utilization-prohibited together with said contents da La designated as 
provision-prohibited as above sent from said list sending apparatus; 

said means for determining determines whether or not said 
contents data sent from said information sending apparatus is 
provision-prohibited as above and also determines whether or not said 
information sending apparatus is utilisation-prohibited as above based 
on said provision prohibition list; 

said means for stopping capture stops capture of waid contents 
dar,A in the case where said contents data is provision-prohibited as 
above and in the case where said information sending apparatus is 
utilisation-prohibited as above respectively. 

366. The information receiving apparatus according to ciais 
comprising : 
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one or more online apparatuses connected online to said list 
sending apparatus and receiving said provision prohibition list; and 

one or more offline apparatuses rwt connected online to said list 
sending apparatus; and wherein 

said online apparatus comprises: 

means for an online apparatus for sending a list/ that is, sending 
said provision prohibition list to said offline apparatus on connecting 
the offline apparatus; 

means for an online apparatus for receiving, that is, directly 
receiving said contents data sent from said information sending 
apparatus, or receiving said concents data sent from said information 
sending apparatus via other online apparatus srxi offline apparatus; 
and 

means for an online apparatus for stopping capture of said 
contents data as required based on said provision prohibition List; 
and 

said offline apparatus comprises: 

means for an offline apparatus for sending a list, that is, sending 
said provision prohibition list to said offline apparatus as required 
on connecting the offline apparatus; 

means for an offline apparatus for receiving, thac is, receiving 
said provision prohibition li3t sent from said online apparatus, and 
also directly receiving said contents data sent from said information 
sending apparatus, or receiving said contents data sent iroin said 
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information seeding apparatus via other online apparatus and offline 
apparatus; and 

means tor tin offline apparatus for stopping capture of said 
contents data as required based on said provision prohibition list. 

367. The information receiving apparatus according to claiTti 366, 
wherein: 

said online apparatus comprises means for an online apparatus 
for, if said means for an online apparatus tor receiving receives said 
contents data sent from said offline apparatus, determining whether 
or not said contents data is provision-prohibited as above and also 
determining whether or not said information sending apparatus that is 
the source of the contents data is utilization-prohibited as above based 
on said provision prohibition list; 

said means for an online apparatus for stepping capture stops 
capture of said contents data in the case where said contents data is 
pro vision -prohibited as above and in the case where said information 
sending apparatus in utilization-prohibited as above according to 
results of determination acquired from said means .for an. online 
apparatus for determining; and 

said means for an online apparatus for sending a list sends said 
provision prohibition list to said offline apparatus in the case where 
said contents data is provision-prohibited as above and in the case 
where said information sending apparatus is u t i \\ zat ion -prohibited as 



above. 
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368. The information receiving apparatus according to claim 367, 
wherein: 

said offline apparatus comprises means for an offline apparatus 
for, if means for an offline apparatus for receiving receives said 
contents data sent from another offline apparatus, determining whether 
or not said contents data is provision-prohibited an above and also 
determining whether or not said information sending apparatus that is 
the source of the contents data is utilization-prohibited as above based 
on .said provision prohibition list; 

means for an offline apparatus for stopping capture stops capture 
of said contents data in the case where said contents data is 
provision-prohibited as above and in the case where said Information 
sending apparatus is utilization-prohibited as above according to 
results Of determination acquired from said means fox an offline 
apparatus for determining; and 

said means for an offline apparatus for sending a list sends said, 
provision prohibition list L*o another of fline apparatus as above in 
the case where said contents data is provision-prohibited as above and. 
in the case where said information sending apparatus is 
utilization-prohibited as above. 

369. An information provision method, comprising: 

a sending step of creating a provision prohibition list showing 
s&ic\ nonhenhs data designated as provision-prohibited and sending tho 
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created provision prohibition list by a list sending apparatus, and 
also sending predetermined concents data by an information sending 
apparatus; 

a receiving step of receiving said provision prohibition list 
and also receiving said contents data by an information receiving 
apparatus; 

a determining step of determining whether or not said contents 
data sent from said information sending apparatus is provision- 
prohibited as above based on said provision prohibition list by said 
information receiving apparatus; and 

a capture stopping step of stopping capture of said contents data 
in the case where said contents data is provision- prohibited as above 
according to results of determination acquired by said determining 
step. 

370. The i reformation provision method according to claim 369, wherein: 
said sending step registers said information sending apparatus 
designated as utilization-prohibited as above on said provision 
prohibition list and sends it by said list sending apparatus; 

said determining step determines by said information receiving 
apparatus whether or not said contents data is provision-prohibited 
as above and also determines whether or not said information sending 
apparatus is utilization-prohibited as above based on said provision 
prohibition list; and 
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said capture stopping step stops capture of said contents data 
in the case where it is determined by said information receiving 
apparatus chat said concents data is provision-prohibited as above and 
In the case where it is dete rained by said information receiving 
apparatus that said information sending apparatus is utilization- 
prohibited as above respectively. 

371. The information provision method according to claim 370, 
comprising: 

an inter-apparatus list sending step of, on connecting .said 
online apparatus to said offline apparatus, sending said provision 
prohibition list to the offline apparatus between one or more online 
apparatuses connected online to said list sending apparatus and 
receiving said provision prohibition iist and one or more offline 
apparatuses not connected online to said list sending apparatus 
constituting said information receiving apparatus; and 

an apparatus capture stopping step of said online apparatus and 
offline apparatus directly receiving said contents data sent from said 
information sending apparatus or receiving said contents data sent from 
said information seeding apparatus via other online apparatus and 
offline apparatus and stopping capture of the contents data as required 
based on said provision prohibition list. 

372. The information provision method according to claim 371, 
comprising : 
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a first determination step of, if said contents data is sent from 
said offline apparatus, said online apparatus determining whether or 
not said contents data is provision-prohibited as above and also 
determining whether or not said information sending apparatus that is 
the source of the contents data is utilization-prohibited as above based 
on said provision prohibition list; and 

a first inter-apparatus list sending step of stopping capture 
of said contents data and also sending said provision prohibition list 
to said offline apparatus in the case where said contents data is 
provision-prohibited as above and in the case where said information 
send i no apparatus is utilization-prohibited as above respectively. 

373. The information provision method according ~o claim 3?2, 
comprising: 

a second determination step of, if said contents data Is sent 
from another offline apparatus, said offline apparatus determining 
whether or not said contents data is provision-prohibited as above and 
also determines whether or not said information sending apparatus that 
is the source of the contents data is utilization-prohibited as above 
based on said provision prohibition list; and 

a second inter-apparatus list sending step of stopping capture 
of said contents data and also sending said provision prohibition list 
to another of fline apparatus as above in the case where said content;* 
data is pruviriiuii-pruhUutecl as a^ove and in the case where 3^0 
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information sending apparatus is utilization-prohibited as above 
respectively. 

374. A list sending method fcr sending a predetermined list no an 
info relation receiving apparatus receiving predetermined contents data 
sent from an information sending apparatus, comprising; 

a list creating step of creating a provision prohibition list 
showing said contents data designated as provision-prohibited; and 

a sending step of sending said provision prohibition list to said 
information receiving apparatus. 

37 The list sending method according to clain 374, wherein said list 
creating step registers said .information sending apparatus designated 
as utilization-prohibited on said provision prohibition list. 

37 6. The list sending method according to claim 375, wherein; 

said list creating step updates said provision prohibition list 
every U.ine said contents data is designated os provision-prohibited 
as above or every time said information sending apparatus is designated 
as utilization-prohibited as above; and 

said sending step sends said provision prohibition list to said 
information receiving apparatus every time it is updated. 
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3*77. An information receiving method for receiving predetermined 
contents data sent from an information sending apparatus and a 
predetermined list sent from a list sending apparatus, comprising: 

a receiving step of receiving a provision prohibition list 
showing said contents data designated as provision-prohibited sent from 
said list sending apparatus; 

a determining step oi determining whether or not said contents 
data sent from said information sending apparatus Ls provision- 
prohibited based on said provision prohibition list; and 

a capture stopping step of stopping capture of said contents data 
in the case where the contents data is provision-prohibited as above 
according to results of determination acquired frost, said determining 
s tep . 

37Q . The information receiving method according to cla.ira 377, wherein: 
said receiving step receives said provision prohibition list 
showing said information sending apparatus designated as 
utilization-prohibited together with said contents data designated as 
provision-prohibited as above sent from said list sending apparatus; 

said determining step determines whether or not said contents 
data sent from said information sending apparatus is provision- 
prohibited as above and also determines whether or not said information 
sending apparatus is utilization-prohibited as above based on said 
provision prohibition list; 
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said capture stopping step stops capture of said contents data 
in the case where said contents data is provision-prohibited as above 
and in the case where said information sending apparatus is 
utilization-prohibited as above respectively. 

3*?9. An information receiving method by an online apparatus connected 
online co said list sending apparatus , comprising ; 

an online apparatus receiving step of receiving said provision 
prohibition list sent from said list sending apparatus, and also 
directly receiving said contents data sent from said .information 
sending apparatus, or receiving said contents data sent from saio 
information sending apparatus via another online apparatus as above 
or an offline apparatus not connected online to said list sending 
apparatus; mid 

an online apparatus sending step of sending said provision 
prohibition list to said offline apparatus on connecting the offline 
apparatus . 

380. The information receiving method according to claim 37 9, 
comprising : 

an online apparatus determining step of determining whether or 
not said contents data is provision -prohibited as above and also 
determining whether or nor. said information sending apparatus is 
utilization-prohibited as above based on 3a id provision prohibition 



list; 
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an online apparatus capture stopping step of stopping capture 
of said contents data in the case where said contents data is 
provision-prohibited as above and in the case where said information 
sending apparatus is utilization-prohibited as above respectively, 

381. The information receiving method according to claim 380, wherein: 
said online apparatus sending step sends said provision 

prohibition list to said offline apparatus when receiving said contents 
data sent from said offline apparatus in the case where said contents 
data is provision-prohibited as above and in the case where said 
information sending apparatus is ut il i za r:,i on-prohibited as above. 

382. An information receiving method by an offline apparatus nor. 
connected online to a list sending apparatus, comprising: 

an offline apparatus receiving step of, on connecting an online 
apparatus connected online to said list sending apparatus, receiving 
said provision prohibition list sent from the online apparatus, and 
also directly receiving said contents data sent from said information 
sending apparatus, or receiving said contents data sent from said 
information sending apparatus via another online apparatus or offline 
apparatus as above; and 

an offline apparatus sending seep of, on connecting another 
offline apparatus as above/ sending saiil provision prohibition list 
as required to the offline apparatus. 
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363. The inforrouti.cn receiving method according to claim 382, 
comprising: 

an of fline apparatus determining step of determining whether said 
contents data is provision-prohibited as above and also determining 
whether or not said information sending apparatus is utilization- 
prohibited as above based on said provision prohibition list; 

an offline apparatus capture stopping step of stopping capture 
of said contents data in the case where said contents data is 
provision-prohibited as above and in the case where said information 
sending apparatus is utilization-prohibited as above respectively. 

384 . The information receiving method according to claim 383, wherein: 

said offline apparatus sending step sends said provision 
prohibition list to another offline apparatus as above when receiving 
said contents da to sent from another offline apparatus as above in the 
case where said contents data is provision-prohibited as above and in 
the case where said information sending Apparatus is utilization- 
prohibited as above. 

385. A program storage medium storing a predetermined program and 
supplying the program to a list sending apparatus, characterized in 
that said program comprises: 

a list creating step of creating a provision prohibition list 
showing predetermined contents data designated as provision- 



prohibited; and 
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a sending step of sending said provision pronioition list to an 
information receiving apparatus receiving said contents data. 

386. The program storage medium according to claim 385, wherein: 
said list creating step of said program registers said 

information sending apparatus designated as utilization-prohibited on 
said provision prohibition list, oC information sending apparatuses 
sending said contents data to said information receiving apparatus. 

387. The program storage medium according to claim 38 6, wherein: 
said list creating step of said program updates said provision 

prohibition List every time said contents data is designated as 
provision-prohibited as above or every time said in format ion sending 
apparatus is designated as utilization-prohibited as above; and 

said sending step sends said provision prohibition list to said 
information receiving apparatus every time it is updated. 

3S8. A program storage medium storing a predetermined program and 
supplying the program to an information receiving apparatus, 
characterized in that said program comprises: 

a receiving step of receiving a provision prohibition list 
showing predetermined contents data designated as provision-prohibited 
sent from a list sending apparatus; 
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a determining step of determining whether or not said concents 
data sent from an information sending apparatus is provision-prohibited 
as above based on said provision prohibition list; and 

a capture stopping step of stopping capture of said contents data 
in the case where the contents data is provision-prohibited as above 
according to results of determination acquired from said determining 
step. 

339. The program storage medium according to claim -"388, wherein: 
said receiving step of said program receives said provision 
prohibition list showing said information setidiny apparatus designated 
as utilization-prohibited together with said contents data designated 
as provision-prohibited as above sent from said list sending apparatus; 

said determining step determines whether or not said contents 
data sent from said information sending apparatus is provision- 
prohibited as above and also determines whether or not said information 
sending apparatus is utilization-prohibited as above based on said 
provision prohibition list; 

said capture stopping step stops capture of said contents data 
in the case where said contents data is provision-prohibited as above 
and in the case where said information sending apparatus is 
utilization-prohibited as above respectively. 
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390. Pl program storage medium storing a predetermined program and 
supplying the program to an online apparatus/ characterized in that 
said program comprises: 

an online apparatus receiving step of receiving .sale provision 
prohibition list sent from said list sending apparatus, and also 
directly receiving said contents data acne from said information 
sending apparatus, or receiving said contents data sent from said 
information sending apparatus via another online apparatus connected 
online to the list sending apparatus or an offline apparatus not 
connected online to said list sending apparatus; and 

an online apparatus sending step of sending said, provision 
prohibition list to said offline apparatus cn connecting the offline 
apparatus . 



391. The program storage medium according to claim 390, wherein said 
program comprises: 

an online apparatus determining step of determining whether or 
not said contents data is provision-prohibited as above and also 
determining whether or not said information sending apparatus is 
utilization-prohibited as above based on said provision prohibition 
list; 

an online apparatus capture stopping step of scooping capture 
of said contents data in the case where said contents data is? 
provision-prohibited as above and in the case whore said information 

sending apparatus is utilization-prohibited as above respectively. 
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392. The program storage medium according to claim 391* wherein: 
said online apparatus sending step of said program sends said 

provision prohibition list to said offline apparatus when receiving 
said contents data sent from said offline apparatus in Lhe esse where 
said concents data is provision-prohibited as above and in the case 
where said information sending apparatus is utilization-prohibited as 
above . 

393. A program storage medium storing a predetermined program and 
supplying the program to an offline apparatus/ characterized in that 
Maid program comprises : 

an offline apparatus receiving step of:, on connecting an online 
apparatus connected online to a list sending apparatus, receiving said 
nrovision prohibition list sent from the online apparatus, and also 
directly receiving said contents data sent frcrc said information 
sending apparatus, or receiving said contents data sent from 3a id 
information sending apparatus via another online apparatus as above 
or an offline apparatus not connected online to said list sending 
apparatus; and 

an offline apparatus sending step of sending said provision 
prohibition list as required to another offline apparatus as above on 
connecting the offline apparatus. 
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394. The program storage medium according to claim 393, wherein said 
program comprises: 

an offline apparatus determining step ot determining whether or 
not said contents data is provision-prohibi ted as above and also 
determining whether or not said information sending apparatus is 
vitilizaticn-prohibited as above based on said provision prohibition 
1.1st; 

an offline apparatus capture stopping step of stopping capture 
of said contents data in the case where said contents data is 
provision-prohibi ted as above and in the case where said information 
sending apparatus Is utilization-prohibited as above respectively. 

395. The program storage raediun according l co claim 394, wherein: 
said offline sending step of said program sends said provision 

prohibition list to another offline apparatus as above when receiving 
said contents data seat from another offline apparatus as above in the 
case where said contents data is provision-prohibited as above and in 
the case where said information sending apparatus is utilization- 
prohibited as above. 



